What is the official website of Disney+ Hotstar ?

The official website of Disney+ Hotstar is http://www.hotstar.com/.

What is Disney+ Hotstar's cybersecurity risk score?

Disney+ Hotstar has an AI-generated cybersecurity risk score of 774 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Disney+ Hotstar experienced?

According to Rankiteo, Disney+ Hotstar currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Disney+ Hotstar been affected by any supply chain cyber incidents ?

According to Rankiteo, Disney+ Hotstar has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Hitachi Vantara (Incident ID: HIT2032020092925) Snowflake (Incident ID: SNO1019070724)

Does Disney+ Hotstar have SOC 2 Type 1 certification ?

According to Rankiteo, Disney+ Hotstar is not certified under SOC 2 Type 1.

Does Disney+ Hotstar have SOC 2 Type 2 certification ?

According to Rankiteo, Disney+ Hotstar does not hold a SOC 2 Type 2 certification.

Does Disney+ Hotstar comply with GDPR ?

According to Rankiteo, Disney+ Hotstar is not listed as GDPR compliant.

Does Disney+ Hotstar have PCI DSS certification ?

According to Rankiteo, Disney+ Hotstar does not currently maintain PCI DSS compliance.

Does Disney+ Hotstar comply with HIPAA ?

According to Rankiteo, Disney+ Hotstar is not compliant with HIPAA regulations.

Does Disney+ Hotstar have ISO 27001 certification ?

According to Rankiteo,Disney+ Hotstar is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Disney+ Hotstar operate in ?

Disney+ Hotstar operates primarily in the Software Development industry.

How many employees does Disney+ Hotstar have ?

Disney+ Hotstar employs approximately 1,372 people worldwide.

Does Disney+ Hotstar own any subsidiaries ?

Disney+ Hotstar presently has no subsidiaries across any sectors.

How many LinkedIn followers does Disney+ Hotstar have ?

Disney+ Hotstar's official LinkedIn profile has approximately 899,674 followers.

What is the NAICS classification code for Disney+ Hotstar ?

Disney+ Hotstar is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Disney+ Hotstar have a Crunchbase profile ?

No, Disney+ Hotstar does not have a profile on Crunchbase.

Does Disney+ Hotstar have a LinkedIn profile ?

Yes, Disney+ Hotstar maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/disney-hotstar.

How many cybersecurity incidents has Disney+ Hotstar experienced ?

As of August 2, 2026, Rankiteo reports that Disney+ Hotstar has experienced 12 cybersecurity incidents.

How many peer or competitor companies does Disney+ Hotstar have ?

Disney+ Hotstar has an estimated 30,519 peer or competitor companies worldwide.

What types of cybersecurity incidents has Disney+ Hotstar faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Disney+ Hotstar

Boost Score +25 with badge (5 left)

774

/1000

Fair

799

/1000

Fair

Disney+ Hotstar Vendor Cyber Rating & Cyber Score

hotstar.com

Add Your Compliance Badge

Disney+ Hotstar is leading the way as the largest and smartest video platform in the country, reaching over 300+ million users today. We have set a number of world records along the way - including for the highest concurrent viewership at 59 million during the ICC Men's Cricket World Cup 2023. Disney+ Hotstar today is the one-stop destination for all your entertainment needs - from Live Sports, Indian and International Shows and Movies to all Disney content, including Pixar, Marvel, Star Wars, National Geographic and Disney+ Originals. We’re looking for the brightest minds to build the future of TV with us. We believe there are only two ways to realize our goals – by daring or daring more. (Yeah, that was just for impact) Feeling gutsy?

Disney+ Hotstar A.I CyberSecurity Scoring

Scoring History

Disney+ Hotstar

Disney+ Hotstar CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

The Walt Disney Com...

Ransomware

100

8/2025

TOYTHEFED177305...

Disney+ Hotstar

Ransomware

100

6/2025

DIS001062125

Disney+ Hotstar

Breach

5/2025

DIS901050225

The Walt Disney Com...

Ransomware

100

4/2025

Hitachi Vantara

Disney+ Hotstar

Breach

100

2/2025

THE409030225

Disney+ Hotstar

Breach

11/2024

THE001111224

Disney+ Hotstar

Breach

11/2024

WAL000110424

Disney+ Hotstar

Breach

100

7/2024

THE000071624

The Walt Disney Com...

Breach

100

6/2024

Snowflake

SNO1019070724

Disney+ Hotstar

Breach

11/2022

ABC256322510282...

The Walt Disney Com...

Breach

1/2020

TICHARATTPRIMCD...

Disney+ Hotstar

Breach

7/2016

THE610072625

Loading…

A.I.

Disney+ Hotstar Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Disney+ Hotstar

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Disney+ Hotstar in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Disney+ Hotstar in 2026.

Incident Types Disney+ Hotstar vs Software Development Industry Avg (This Year)

No incidents recorded for Disney+ Hotstar in 2026.

Incident History - Disney+ Hotstar (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Disney+ Hotstar Subsidiaries

Disney+ Hotstar

Software Development

Website: http://www.hotstar.com/

Company Size: 501-1,000 employees

The Walt Disney CompanyEntertainment Providers

Walt Disney WorldEntertainment Providers

ESPNBroadcast Media Production and Distribution

The Walt Disney StudiosEntertainment Providers

Walt Disney Animation StudiosAnimation and Post-production

LucasfilmEntertainment Providers

Disney Cruise LineTravel Arrangements

HuluTechnology, Information and Internet

20th Century StudiosMedia Production

Disney ExperiencesEntertainment Providers

Disney StarBroadcast Media Production and Distribution

Walt Disney ImagineeringEntertainment Providers

Industrial Light & MagicEntertainment Providers

Marvel EntertainmentEntertainment Providers

Disney Media & Entertainment DistributionEntertainment Providers

Disney StreamingEntertainment

Marvel StudiosEntertainment Providers

Shanghai Disney ResortEntertainment Providers

Hong Kong DisneylandEntertainment Providers

Disney Theatrical GroupEntertainment Providers

Disney AdvertisingAdvertising Services

Disney General Entertainment ContentEntertainment Providers

Pixar Animation StudiosAnimation and Post-production

ESPN India Ad SolutionsEntertainment

Disney StoreRetail

Disney ResearchResearch Services

Disney Publishing WorldwideBook and Periodical Publishing

Disney Meetings & EventsHospitality

Disney Vacation ClubTravel Arrangements

Searchlight PicturesEntertainment

FXEntertainment Providers

BasketsEntertainment Providers

ESPN STAR SportsBroadcast Media Production and Distribution

Disney Music GroupMusicians

Disney ChannelEntertainment Providers

Disney Data & AnalyticsEntertainment Providers

Partners Federal Credit UnionFinancial Services

Partners Retirement and Wealth ManagementInvestment Management

ESPNcricinfo India Ad SolutionsOnline Audio and Video Media

Storyliving by DisneyReal Estate

Disney Advertising Sales & Partnerships Latin AmericaAdvertising Services

Disney's StudioLABEntertainment

ESPN EventsSpectator Sports

guia ESPNBroadcast Media Production and Distribution

The Walt Disney Company UK & IrelandEntertainment Providers

Disney LaunchpadEntertainment Providers

Disney Television AnimationAnimation and Post-production

The Walt Disney Company ItaliaEntertainment Providers

Disneyland ParisEntertainment Providers

Disney FranceEntertainment

The Walt Disney Company France - Expérience EmployéHuman Resources Services

Disney InstituteProfessional Training and Coaching

Professional Development CoursesProfessional Training and Coaching

ABC NewsBroadcast Media Production and Distribution

Disneyland ResortEntertainment

Loading…

Disney+ Hotstar Similar Companies

Xiaomi Technology

mi.com

Xiaomi Corporation was founded in April 2010 and listed on the Main Board of the Hong Kong Stock Exchange on July 9, 2018 (1810.HK). Xiaomi is a consumer electronics and smart manufacturing company with smartphones and smart hardware connected by an IoT platform at its core. Embracing our vision of “Make friends with users and be the coolest company in the users’ hearts”, Xiaomi continuously pursues innovations, high-quality user experience and operational efficiency. The company relentlessly builds amazing products with honest prices to let everyone in the world enjoy a better life through innovative technology. Xiaomi is one of the world's leading smartphone companies. In December 2025, global monthly active users ( "MAU") reached 754.1 million. The company has also established the world’s leading consumer AIoT (AI+IoT) platform, reached 1079.2 million smart devices connected to its platform (excluding smartphones, laptops and tablets) as of December 31, 2025. Xiaomi products are present in more than 100 countries and regions around the world. In July 2025, Xiaomi was included in the Fortune Global 500 list for the seventh year in a row. Xiaomi is a constituent of the Hang Seng Index, Hang Seng China Enterprises Index, Hang Seng TECH Index and Hang Seng China 50 Index.

Avaya

cb tinyurl.com

At Avaya, we give our customers the freedom to take their business in the directions that benefit them most. We provide the paths for both customers and their employees where every moment big and small can drive in the moment, memorable experiences. The journey is theirs at the pace that makes sense for them with the innovation without disruption they need now and the solutions they can invest in the future.

ServiceNow

cb servicenow.com

ServiceNow (NYSE: NOW) makes the world work better for everyone. Our cloud-based platform and solutions help digitize and unify organizations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile. And we can all create the future we imagine. The world works with ServiceNow. For more information, visit www.servicenow.com.

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

SAP

cb sap.com

SAP is the leading enterprise application and business AI company. We stand at the intersection of business and technology, where our innovations are designed to directly address real business challenges and produce real-world impacts. Our solutions are the backbone for the world’s most complex and demanding processes. SAP’s integrated portfolio unites the elements of modern organizations — from workforce and financials to customers and supply chains — into a unified ecosystem that drives progress. SAP privacy statement for followers: www.sap.com/sps Our Community Guidelines At SAP, we're committed to fostering meaningful conversations that respect everyone in our community. To maintain a positive environment, we moderate comments that: • Target individuals personally, including our employees, customers, or partners • Contain discriminatory, harassing, or threatening language/content • Share personal information without consent • Promote misinformation or spam or 3rd-party links We believe in open dialogue and constructive feedback, but we will remove content that violates these guidelines without notice. We appreciate your understanding and contribution to a respectful community. For questions about our moderation practices, please DM or contact us at [email protected].

Bosch USA

bosch.us

The Bosch Group’s strategic objective is to create solutions for a connected life. Bosch improves quality of life worldwide with innovative products and services that are "Invented for life" and spark enthusiasm. Podcast: http://bit.ly/beyondbosch Imprint: https://www.bosch.us/corporate-information/ Privacy statement: https://bit.ly/binaprv Terms of use: We strive to provide a friendly space for all social media users. Please note that comments on the BoschUSA page are not necessarily representative of the opinions of BoschUSA, nor do we confirm their accuracy. Therefore, at its discretion, BoschUSA reserves the right to remove any comment that is: - Indecent, obscene, pornographic, threatening, violent, discriminatory, political, religious, racist, abusive, derogatory, misleading, off-topic - Violating the rights of others (especially personal, copyright and performance protection rights) - Any contribution in the form of links, text and/or images that are advertisements of third parties - Actions that adversely affect the proper functioning of BoschUSA channels, as well as documents that contain harmful viruses or Like invites.

Shopee

shopee.com

Shopee is the leading e-commerce platform in Southeast Asia and Taiwan. It is a platform tailored for the region, providing customers with an easy, secure and fast online shopping experience through strong payment and logistical support. Shopee aims to continually enhance its platform and become the region’s e-commerce destination of choice via ongoing product optimisation and localised user-centered strategies. Shopee, a Sea company, was first launched in Singapore in 2015, and has since expanded its reach to Malaysia, Thailand, Taiwan, Indonesia, Vietnam and the Philippines. Sea is a leader in digital entertainment, e-commerce and digital financial services across Greater Southeast Asia. Sea's mission is to better the lives of consumers and small businesses with technology, and is listed on the NYSE under the symbol SE. The Shopee team is rapidly expanding across the region and we are constantly on the lookout for talents who have the passion and drive to become part of a fast-moving and dynamic team. Do check out our career website http://careers.shopee.com for our available positions!

Sage

sage.com

At Sage, we knock down barriers with information, insights, and tools to help your business flow. We provide businesses with software and services that are simple and easy to use, as we work with you to give you that feeling of confidence. Customers trust our Payroll, HR, and Finance software to make business flow with ease. From our local network of experts to our ever-growing partnerships, we are on hand to give you all the insights you need to thrive. 💚

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on five continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and FleetNet America®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately-owned, Atlanta-based company with $22 billion in annual revenue.

Loading…

NEWS

Disney+ Hotstar CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 13, 2026 08:00 AM

Hotstar Not Working with a VPN: 7 Quick Fixes in 2026

Hotstar is a highly popular streaming platform in India. It offers an extensive library of Indian TV shows, movies, live sports,...

Read Article

January 20, 2026 08:00 AM

JioHotstar Plans: New subscriptions tier start at Rs 79

JioHotstar is one of the most popular Over-The-Top (OTT) platforms in India, as it owns the broadcasting rights to IPL and global cricket...

Read Article

October 17, 2025 07:00 AM

Over 40 billion records left publicly exposed - here's what we know

When you buy through links on our articles, Future and its syndication partners may earn a commission. Data leak. Credit: Shutterstock.

Read Article

September 08, 2025 07:00 AM

ServiceNow Appoints Tirthankar Dutta as Director & Head – Cybersecurity Engineering & AI Automation

ServiceNow has appointed Tirthankar Dutta as Director & Head – Cybersecurity Engineering & AI Automation, strengthening its focus on build.

Read Article

May 12, 2025 07:00 AM

How to Watch Disney+ Hotstar in the UK in March 2026

Disney+ Hotstar is one of the most popular streaming platforms in India, which offers exclusive access to Bollywood movies, Hotstar Specials...

Read Article

May 09, 2025 07:00 AM

How to watch Disney+ Hotstar in USA 2026 : Detailed Guide

Whether you're after live cricket, Bollywood hits, or Disney blockbusters, the Indian version of Hotstar has it all – but it's blocked...

Read Article

February 14, 2025 08:00 AM

JioCinema and Disney+ Hotstar Merge to Launch JioHotstar

Anosha Shariq. Writer. Anosha Shariq is a dedicated news writer at VPNRanks, specializing in VPN and online privacy.

Read Article

January 19, 2025 08:00 AM

How to Watch Disney+ Hotstar in the UK

You probably already know that Hotstar is available in the United Kingdom, but that doesn't include any Disney content.

Read Article

January 18, 2025 08:00 AM

How to Watch Disney Plus Hotstar in Australia

Disney Plus Hotstar is home to great Indian TV shows and movies, sports (e.g., Premier League), Disney originals, Star Wars, Marvel, Pixar,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…