What is the official website of Scania Luleå | Ferruform AB | ?

The official website of Scania Luleå | Ferruform AB | is https://www.scania.com/lulea/sv/home.html.

What is Scania Luleå | Ferruform AB |'s cybersecurity risk score?

Scania Luleå | Ferruform AB | has an AI-generated cybersecurity risk score of 747 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Scania Luleå | Ferruform AB | experienced?

According to Rankiteo, Scania Luleå | Ferruform AB | currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Scania Luleå | Ferruform AB | been affected by any supply chain cyber incidents ?

According to Rankiteo, Scania Luleå | Ferruform AB | has been affected by a supply chain cyber incident involving CARIAD, with the incident ID NISSCATOYVOLKAWAVIJAG1775680268.

Does Scania Luleå | Ferruform AB | have SOC 2 Type 1 certification ?

According to Rankiteo, Scania Luleå | Ferruform AB | is not certified under SOC 2 Type 1.

Does Scania Luleå | Ferruform AB | have SOC 2 Type 2 certification ?

According to Rankiteo, Scania Luleå | Ferruform AB | does not hold a SOC 2 Type 2 certification.

Does Scania Luleå | Ferruform AB | comply with GDPR ?

According to Rankiteo, Scania Luleå | Ferruform AB | is not listed as GDPR compliant.

Does Scania Luleå | Ferruform AB | have PCI DSS certification ?

According to Rankiteo, Scania Luleå | Ferruform AB | does not currently maintain PCI DSS compliance.

Does Scania Luleå | Ferruform AB | comply with HIPAA ?

According to Rankiteo, Scania Luleå | Ferruform AB | is not compliant with HIPAA regulations.

Does Scania Luleå | Ferruform AB | have ISO 27001 certification ?

According to Rankiteo,Scania Luleå | Ferruform AB | is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Scania Luleå | Ferruform AB | operate in ?

Scania Luleå | Ferruform AB | operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Scania Luleå | Ferruform AB | have ?

Scania Luleå | Ferruform AB | employs approximately 135 people worldwide.

Does Scania Luleå | Ferruform AB | own any subsidiaries ?

Scania Luleå | Ferruform AB | presently has no subsidiaries across any sectors.

How many LinkedIn followers does Scania Luleå | Ferruform AB | have ?

Scania Luleå | Ferruform AB |'s official LinkedIn profile has approximately 1,768 followers.

What is the NAICS classification code for Scania Luleå | Ferruform AB | ?

Scania Luleå | Ferruform AB | is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Scania Luleå | Ferruform AB | have a Crunchbase profile ?

No, Scania Luleå | Ferruform AB | does not have a profile on Crunchbase.

Does Scania Luleå | Ferruform AB | have a LinkedIn profile ?

Yes, Scania Luleå | Ferruform AB | maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ferruform-ab.

How many cybersecurity incidents has Scania Luleå | Ferruform AB | experienced ?

As of August 2, 2026, Rankiteo reports that Scania Luleå | Ferruform AB | has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Scania Luleå | Ferruform AB | have ?

Scania Luleå | Ferruform AB | has an estimated 13,022 peer or competitor companies worldwide.

What types of cybersecurity incidents has Scania Luleå | Ferruform AB | faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SLFA

Boost Score +25 with badge (5 left)

747

/1000

Moderate

772

/1000

Fair

Scania Luleå | Ferruform AB | Vendor Cyber Rating & Cyber Score

scania.com

Add Your Compliance Badge

Scania Luleå, Ferruform AB (juridiskt namn), är ett fristående helägt dotterbolag till Scania. Vi är centrum för Scanias tillverkning av ramkomponenter i höghållfasta material. Vi möjliggör omställningen till elektrifierade transportlösningar!

SLFA A.I CyberSecurity Scoring

Scoring History

SLFA

Scania Luleå | Ferruform AB | CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Scania Group

Ransomware

100

11/2025

CARIAD

NISSCATOYVOLKAW...

Scania Luleå | Ferr...

Breach

6/2025

SCA301061725

Loading…

A.I.

SLFA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SLFA

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Scania Luleå | Ferruform AB | in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Scania Luleå | Ferruform AB | in 2026.

Incident Types SLFA vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Scania Luleå | Ferruform AB | in 2026.

Incident History - SLFA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Scania Luleå | Ferruform AB | Subsidiaries

SLFA

Motor Vehicle Manufacturing

Website: https://www.scania.com/lulea/sv/home.html

Company Size: 135

Scania GroupMotor Vehicle Manufacturing

Ventures and New Business - Scania GroupAutomation Machinery Manufacturing

Scania SverigeMotor Vehicle Manufacturing

Scania Latin AmericaMotor Vehicle Manufacturing

Scania ArgentinaMotor Vehicle Manufacturing

Scania UKMotor Vehicle Manufacturing

VRS UKAutomotive

Scania BrasilAutomotive

Scania AustraliaMotor Vehicle Manufacturing

Scania ColombiaMotor Vehicle Manufacturing

Italscania S.p.A.Motor Vehicle Manufacturing

Scania Time TVTruck Transportation

Scania TimeTransportation/Trucking/Railroad

Scania ChileMotor Vehicle Manufacturing

Scania SpainMotor Vehicle Manufacturing

Scania NederlandAutomotive

Scania MarocMotor Vehicle Manufacturing

Scania East AfricaMotor Vehicle Manufacturing

Scania Middle EastMotor Vehicle Manufacturing

Keltruck ScaniaWholesale Motor Vehicles and Parts

Scania MalaysiaAutomotive

Codema ScaniaTruck Transportation

Scania Schweiz AGMotor Vehicle Manufacturing

Scania West AfricaMotor Vehicle Manufacturing

Scania Industrial Operations AsiaMotor Vehicle Manufacturing

Scania New ZealandTruck Transportation

Scania DanmarkTruck Transportation

Scania Parts LogisticsTransportation, Logistics, Supply Chain and Storage

Scania PortugalMotor Vehicle Manufacturing

Scania USAMotor Vehicle Manufacturing

Scania OskarshamnMotor Vehicle Manufacturing

Scania Tanzania LtdTruck Transportation

Scania DeutschlandMotor Vehicle Manufacturing

Scania BelgiumMotor Vehicle Manufacturing

Scania SingaporeAutomotive

Scania LogisticsTransportation, Logistics, Supply Chain and Storage

Scania Hong KongMotor Vehicle Manufacturing

Scania BeneluxTransportation/Trucking/Railroad

Scania UkraineMotor Vehicle Manufacturing

Scania ÖsterreichMotor Vehicle Manufacturing

Scania LietuvaAutomotive

Scania South AfricaTransportation/Trucking/Railroad

Scania PolskaAutomotive

Scania Industrial BatteriesIndustrial Machinery Manufacturing

Scania Czech RepublicMotor Vehicle Manufacturing

Scania FranceMotor Vehicle Manufacturing

SCANIA EAR (Scania East Adriatic Region)Automotive

Scania Fuel CardsOil and Gas

Scania Rhône-AlpesMotor Vehicle Manufacturing

Scania Financial Services IrelandFinancial Services

Scania LatviaMotor Vehicle Manufacturing

Scania BulgariaMotor Vehicle Manufacturing

SCANIA SlovakiaMotor Vehicle Manufacturing

Scania JapanMotor Vehicle Manufacturing

Scania ThailandTruck Transportation

Scania ZambiaAutomotive

Scania MilanoMotor Vehicle Manufacturing

Scania Commerciale S.p.A.International Trade and Development

Scania Finance New ZealandTruck Transportation

Scania LuxembourgMotor Vehicle Manufacturing

Scania MagyarországAutomotive

Scania Trucking LTDTransportation, Logistics, Supply Chain and Storage

Scania Finance DACHFinancial Services

Scania TanzaniaTruck Transportation

Scania Eesti ASMotor Vehicle Manufacturing

Scania ChinaMotor Vehicle Manufacturing

Loading…

Scania Luleå | Ferruform AB | Similar Companies

Rivian

cb rivian.com

Doing something different is never easy. It requires courage, optimism and grit. Core to our mission is building a team of adventurous individuals determined to make a positive impact on the world. This means challenging ourselves constantly. Stretching beyond the bounds of conventional thinking. Reframing old problems. Seeking new solutions. And operating comfortably in a space of uncertainty. While our backgrounds are diverse, our team shares a love of the outdoors and a desire to protect it for future generations. Do you like doing the impossible? We’d love to hear from you.

Porsche AG

porsche.click

“In the beginning I looked around and could not find quite the car I dreamed of. So I decided to build it myself.“ This quote by Ferry Porsche sums up everything that makes Porsche what it is. It has been our guiding star for more than 75 years. Every day, we search for the best solution with commitment, passion and enthusiasm. We courageously tread new and untested paths. Our entrepreneurial pioneering spirit makes unique solutions possible. We love challenges, act quickly and always act respectfully and fairly towards people and the environment. Driven by dreams: At Porsche we believe in the power of dreams. As different as they may be, they have one thing in common: they are what drive us. If you too want to dream and change the world, then you have come to the right place. We invite you to dream with us and together make the world more innovative, more sustainable and more colourful. What could that be like? On our website www.porsche.com/careers you can gain an insight into the Porsche working environment and experience first-hand what makes working at Porsche so fascinating. Make your own dream come true. And the dreams of millions of others. This is where you will find all our job offers based on your preferences. Take your chance and apply online: jobs.porsche.com News, background stories and more about Porsche: www.newsroom.porsche.com Legal notice: http://www.porsche.com/germany/legal-notice/ Social privacy: https://www.porsche.com/germany/social-privacy/

BorgWarner

borgwarner.com

As a global product leader for over 130 years, we deliver innovative and sustainable mobility solutions. Guided by our commitment to inclusion, integrity, excellence, responsibility and collaboration—and our pledge to reach carbon neutrality by 2035—we’re leading the automotive industry to a future that is cleaner, healthier and safer for all. Start your future with BorgWarner now! We are looking for dedicated, talented people to fill our manufacturing and technical facilities all over the world. For more information, please visit: https://bit.ly/WorkAtBorgWarner For legal and data protection inquiries please visit: https://www.borgwarner.com/legal Career Scam Disclaimer BorgWarner makes no representations or guarantees regarding employment opportunities listed on any third-party website. To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by BorgWarner. Applicants should never provide their Social Security numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. Job applicants are invited to contact BorgWarner through BorgWarner’s website to verify the authenticity of any employment opportunities.

Toyota North America

cb toyota.com

At Toyota, we’re known for making some of the highest quality vehicles on the road. But there is more to our story. We believe in putting people first and creating opportunities for our team members to build careers as unique as they are. As one of the world’s most admired brands, we are leading the way to the future of mobility, so everyone can move freely, happily and comfortably. We have big dreams and believe that nothing is impossible. Ready to Dream, Do and Grow with us?

PACCAR

paccar.com

PACCAR is a global technology leader in the design, manufacture and customer support of premium light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates. PACCAR also designs and manufactures advanced diesel engines, provides financial services, information technology, and distributes truck parts related to its principal business. Kenworth Truck Company builds premium commercial vehicles for sale in the U.S., Canada, Mexico and Australia and for export throughout the world. Peterbilt Motors also designs, manufactures and distributes premium commercial vehicles in the US and Canada. DAF Trucks manufactures trucks in the Netherlands, Belgium, Brasil and the United Kingdom for sale throughout Western and Eastern Europe, and export to Asia, Africa, North and South America. PACCAR Parts operates a network of parts distribution centers offering aftermarket support to Kenworth, Peterbilt and DAF dealers and customers around the world. Aftermarket support includes customer call centers operating 24 hours a day throughout the year and technologically advanced systems to enhance inventory control and expedite order processing. PACCAR Financial Services provides finance, lease and insurance services to dealers and customers in more than 100 countries including a portfolio of more than 175,000 trucks and trailers and total assets in excess of $12 billion. The group includes PACCAR Leasing, a major full-service truck leasing company in North America, with a fleet of over 39,000 vehicles. Environmental responsibility is one of PACCAR’s core values. The company regularly develops new programs to help protect and preserve the environment and PACCAR has established ambitious goals to further reduce emissions and enhance fuel efficiency in its truck models.

Joyson Group

joyson.com

Joyson Group is a young, ambitious high-tech company, its headquarter is located in Ningbo, China. With more than 100 bases in 30 countries, over 40000 employees globally. Founded in 2004, Joyson 's main products used to be automotive functional components. Since 2011, the company has acquired several companies: automotive electronics company, PREH GmbH; robotic company IMA and QUIN GmbH in Germany, and a global automotive safety system from United States: KSS, and German smart car connect industry leader TS GmbH，and Takata, a Japanese automotive safety parts maker successively. Through enterprise innovation, product upgrade and multiple international mergers and acquisitions, the company has transformed into a global market leader. Through leading innovative design, stable manufacturing, quality management and excellent service, Joyson become a long-term partner of global automotive manufacturers as BMW, Mercedes Benz, Audi, Volkswagen, General Motors and Ford. Joyson is also awarded constantly by Porsche, BMW, Mercedes Benz, Volkswagen, General Motors as Quality Supplier Excellence Award. Joyson aims to be the most accountable partner for outstanding global automotive manufacturers, and the innovative market leader in car safety and intelligent driving industries.

PT Astra Honda Motor

astra-honda.com

PT Astra Honda Motor (AHM) is a manufacturing company which produces motorcyle of Honda brand. A collaboration of strong Astra Management System and Honda high technology makes AHM the leading company in motorcycle market in indonesia. Now PT. Astra Honda Motor becoming Indonesia leading company in motorcycles industry. Official Social Media: facebook.com/welovehonda twitter.com/welovehonda instagram.com/welovehonda_id youtube.com/user/welovehondaID

Li Auto

liauto.com

Li Auto Inc. is a leader in China's new energy vehicle market. The Company designs, develops, manufactures, and sells premium smart electric vehicles. Its mission is: Create a Mobile Home, Create Happiness (创造移动的家,创造幸福的家). Through innovations in product, technology, and business model, the Company provides families with safe, convenient, and comfortable products and services. Li Auto is a pioneer in successfully commercializing extended-range electric vehicles in China. While firmly advancing along this technological route, it builds platforms for battery electric vehicles in parallel. The Company leverages technology to create value for users. It concentrates its in-house development efforts on proprietary range extension systems, innovative electric vehicle technologies, and smart vehicle solutions. The Company started volume production in November 2019. Its current model lineup includes Li MEGA, a high-tech flagship family MPV, Li L9, a six-seat flagship family SUV, Li L8, a six-seat premium family SUV, Li L7, a five-seat flagship family SUV, and Li L6, a five-seat premium family SUV. The Company will continue to expand its product lineup to target a broader user base.

American Honda Motor Company, Inc.

honda.com

We are Honda. A company built on dreams and the determination to make them come true. Driven by our commitment to society and the planet, our work brings joy to our customers and enhances mobility, as we work to help people everywhere expand their life’s potential. Our products, from cars and trucks, to advanced light jets and other forms of mobility, reflect our belief that the purpose of technology is to help people. Together, we are building an inclusive culture where people feel seen and celebrated. Where associates from a variety of backgrounds can apply their unique ideas and experiences to help us create a cleaner, safer, more exciting mobile world. You’re invited to join Honda on this journey. Your individual skills, passion, persistence, innovative mindset and challenging spirit are needed to help Honda Bring the Future. Bring the Future at honda.com/careers

Loading…

NEWS

Scania Luleå | Ferruform AB | CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 23, 2021 08:00 AM

H2 Green Steel to Build Large-scale Fossil-free Steel Plant in Northern Sweden

H2 Green Steel (“H2GS”) will be a large-scale steel producer based on a fossil-free manufacturing process targeting large European OEMs.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…