What is the official website of ReflectionBio – By Patients, For Patients ?

The official website of ReflectionBio – By Patients, For Patients is http://www.ReflectionBio.com.

What is ReflectionBio – By Patients, For Patients's cybersecurity risk score?

ReflectionBio – By Patients, For Patients has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has ReflectionBio – By Patients, For Patients experienced?

According to Rankiteo, ReflectionBio – By Patients, For Patients currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ReflectionBio – By Patients, For Patients been affected by any supply chain cyber incidents ?

According to Rankiteo, ReflectionBio – By Patients, For Patients has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does ReflectionBio – By Patients, For Patients have SOC 2 Type 1 certification ?

According to Rankiteo, ReflectionBio – By Patients, For Patients is not certified under SOC 2 Type 1.

Does ReflectionBio – By Patients, For Patients have SOC 2 Type 2 certification ?

According to Rankiteo, ReflectionBio – By Patients, For Patients does not hold a SOC 2 Type 2 certification.

Does ReflectionBio – By Patients, For Patients comply with GDPR ?

According to Rankiteo, ReflectionBio – By Patients, For Patients is not listed as GDPR compliant.

Does ReflectionBio – By Patients, For Patients have PCI DSS certification ?

According to Rankiteo, ReflectionBio – By Patients, For Patients does not currently maintain PCI DSS compliance.

Does ReflectionBio – By Patients, For Patients comply with HIPAA ?

According to Rankiteo, ReflectionBio – By Patients, For Patients is not compliant with HIPAA regulations.

Does ReflectionBio – By Patients, For Patients have ISO 27001 certification ?

According to Rankiteo,ReflectionBio – By Patients, For Patients is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ReflectionBio – By Patients, For Patients operate in ?

ReflectionBio – By Patients, For Patients operates primarily in the Biotechnology Research industry.

How many employees does ReflectionBio – By Patients, For Patients have ?

ReflectionBio – By Patients, For Patients employs approximately 1 people worldwide.

Does ReflectionBio – By Patients, For Patients own any subsidiaries ?

ReflectionBio – By Patients, For Patients presently has no subsidiaries across any sectors.

How many LinkedIn followers does ReflectionBio – By Patients, For Patients have ?

ReflectionBio – By Patients, For Patients's official LinkedIn profile has approximately 73 followers.

Does ReflectionBio – By Patients, For Patients have a Crunchbase profile ?

No, ReflectionBio – By Patients, For Patients does not have a profile on Crunchbase.

Does ReflectionBio – By Patients, For Patients have a LinkedIn profile ?

Yes, ReflectionBio – By Patients, For Patients maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/reflectionbio.

How many cybersecurity incidents has ReflectionBio – By Patients, For Patients experienced ?

As of August 2, 2026, Rankiteo reports that ReflectionBio – By Patients, For Patients has not experienced any cybersecurity incidents.

How many peer or competitor companies does ReflectionBio – By Patients, For Patients have ?

ReflectionBio – By Patients, For Patients has an estimated 4,734 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RPP

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

ReflectionBio – By Patients, For Patients Vendor Cyber Rating & Cyber Score

reflectionbio.com

Add Your Compliance Badge

Reflection Biotechnologies (ReflectionBio®) is a patient-driven biotech company. Founded by a rare disease patient, we apply the “By Patients, For Patients” approach for patients to combine efforts in driving #RareDisease and #OrphanDrug R&D. We focus on developing gene therapy and other novel treatments for rare diseases which currently have no or few treatment options available.

RPP A.I CyberSecurity Scoring

Scoring History

RPP

ReflectionBio – By Patients, For Patients CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

RPP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RPP

Incidents vs Biotechnology Research Industry Avg (This Year)

No incidents recorded for ReflectionBio – By Patients, For Patients in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for ReflectionBio – By Patients, For Patients in 2026.

Incident Types RPP vs Biotechnology Research Industry Avg (This Year)

No incidents recorded for ReflectionBio – By Patients, For Patients in 2026.

Incident History - RPP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ReflectionBio – By Patients, For Patients Subsidiaries

RPP

Biotechnology Research

Website: http://www.ReflectionBio.com

Company Size: 1

HKSTP - Hong Kong Science and Technology Parks CorporationIT Services and IT Consulting

LalamoveSoftware Development

CredoSemiconductor Manufacturing

Fano (Fano Labs)Technology, Information and Internet

BioMapBiotechnology Research

FreightAmigoIT Services and IT Consulting

Centre for Oncology and ImmunologyResearch Services

HKRITA - The Hong Kong Research Institute of Textiles and Apparel LimitedResearch Services

Pantheon Lab LimitedSoftware Development

Belun Technology Company LimitedMedical Equipment Manufacturing

Centre for Immunology & Infection - C2iResearch Services

Dayta AIIT Services and IT Consulting

SquareDog RoboticsIndustrial Automation

ArbeleBiotechnology Research

August RoboticsComputers and Electronics Manufacturing

NovoheartBiotechnology Research

ClusterTech LimitedInformation Technology & Services

Multi-Scale Medical Robotics Center LtdMedical Equipment Manufacturing

Aura LabsIT Services and IT Consulting

Studio AOEAdvertising Services

Centre for Advances in Reliability and SafetyAppliances, Electrical, and Electronics Manufacturing

ALiA BioTechMedical Equipment Manufacturing

Integrated Solutions LimitedSoftware Development

PerksBarSoftware Development

GoByBus.hkIT Services and IT Consulting

Blockchain Solutions LimitedIT Services and IT Consulting

CerTrazeInformation Technology & Services

HKSTP CapitalVenture Capital and Private Equity Principals

PuraPharm Corporation LimitedPharmaceutical Manufacturing

Sycra Technologies LimitedAppliances, Electrical, and Electronics Manufacturing

n-hop technologies LimitedTelecommunications

JSAB Technologies LimitedSemiconductor Manufacturing

QBS System LimitedIT Services and IT Consulting

Hong Kong Industrial Artificial Intelligence and Robotics Centre (FLAIR)Appliances, Electrical, and Electronics Manufacturing

Growgreen LimitedComputers and Electronics Manufacturing

Life Code LimitedBiotechnology Research

uHey LimitedSpectator Sports

eNano Health LimitedBiotechnology Research

Profiled Group LimitedAppliances, Electrical, and Electronics Manufacturing

2GoTradeFinancial Services

Datago Technology LimitedFinancial Services

AIVISoftware Development

BeeInventor 點子建IT Services and IT Consulting

Well Being Digital Limited (WBD101)Semiconductor Manufacturing

LaSense Technology LimitedIndustrial Machinery Manufacturing

HKCeND - Hong Kong Center for Neurodegenerative Diseases (香港神經退行性疾病中心)Research Services

AppoTech LimitedSemiconductors

Zensis LimitedIT Services and IT Consulting

Homie Living | 靈感+購物香港線上家居平台Furniture and Home Furnishings Manufacturing

The GrindTechnology, Information and Internet

Hong Kong Academy of EngineeringNon-profit Organizations

HSK GeneTech | ProbioLifeBiotechnology Research

BrainNow Medical Technology LimitedMedical Device

Motive Force Technology LimitedSoftware Development

LinkedTech Solutions LimitedInformation Technology & Services

Insight Robotics Ltd.IT Services and IT Consulting

Hessner TechnologiesResearch Services

Buy&ShipInternet Marketplace Platforms

Singular GlobalBlockchain Services

RaSpectSoftware Development

Propagation Systems LimitedAppliances, Electrical, and Electronics Manufacturing

Atom Semiconductor Technologies Ltd.Semiconductors

Imsight TechnologySoftware Development

Imsight – Health CornerSoftware Development

ApoideaTechnology, Information and Media

Stellerus Technology LimitedInformation Services

Narrative ProjectsTechnology, Information and Internet

AppciderIT Services and IT Consulting

Sebit Company LimitedIT Services and IT Consulting

XOOCITY Hong Kong Metaverse 数宇城香港Technology, Information and Internet

Add Care LimitedBiotechnology

PanopticAISoftware Development

MadheadInformation Technology & Services

CryptoBLKBlockchain Services

Loading…

ReflectionBio – By Patients, For Patients Similar Companies

ICON plc

iconplc.com

Since our foundation in Dublin, Ireland in 1990, our mission has been to help our clients to accelerate the development of drugs and devices that save lives and improve quality of life. We do this by delivering best in class information, solutions and performance, with an unyielding focus on quality at all times. We offer a full range of consulting, development and commercialisation services from a global network of offices in 53 countries. We focus our innovation on the factors that are critical to our clients – reducing time to market, reducing cost, and increasing quality – and our global team of experts has extensive experience in a broad range of therapeutic areas.

Gilead Sciences

cb gilead.com

At Gilead, we set – and achieve – bold ambitions to create a healthier world for all people. From our pioneering virology medicines to our growing impact in oncology, we're delivering innovations once thought impossible in medicine. Our focus goes beyond medicines, and we also strive to remedy health inequities and break down barriers to care. We empower our people to tackle these challenges, and we’re all united in our commitment to help millions of people live healthier lives. Social Media Guidelines: https://www.gilead.com/social-media-guidelines

CSL

cb csl.com

CSL is a leading global biopharma company with a dynamic portfolio of lifesaving medicines, including those that treat haemophilia and immune deficiencies, vaccines to prevent influenza, and therapies in iron deficiency, dialysis and nephrology. Since our start in 1916, we have been driven by our promise to save lives using the latest technologies. Today, CSL – including our businesses, CSL Behring, CSL Seqirus, and CSL Vifor – provides lifesaving products to patients in more than 100 countries and employs 29,000+ people. Our unique combination of commercial strength, R&D focus and operational excellence enables us to identify, develop and deliver innovations so our patients can live life to the fullest. See our community guidelines: https://bit.ly/3Bs17Ra

Fortrea

fortrea.com

Fortrea (Nasdaq: FTRE) is a leading global clinical research organization (CRO) dedicated to providing innovative clinical development solutions to the life sciences industry. With over 30 years of clinical research experience, Fortrea has evolved from Covance and Labcorp into a pureplay CRO built for biotech, biopharma, medical device and diagnostic innovators. Fortrea collaborates with both emerging and established companies to deliver agile, fit-for-purpose full service (FSO), functional service (FSP) and hybrid solutions. Fortrea provides comprehensive Phase I-IV clinical trial management, clinical pharmacology, and consulting services, backed by deep experience in more than 20 therapeutic areas. Operating in approximately 100 countries, our diverse and talented team brings scientific rigor, operational excellence, and a strong investigator site network to every trial. By combining the best of our legacy experience with forward-thinking innovation, Fortrea brings predictability to clinical trial execution and helps transform aspirations into outcomes. Together, exceptional is possible. Learn more at Fortrea.com

bioMérieux

biomerieux.com

A family-owned company, bioMérieux has grown to become a world leader in the field of in vitro diagnostics. Our entrepreneurial adventure, begun over a century ago, is driven by an unrelenting commitment to improve public health worldwide. Since 1963, we've been paving the way in the field of in vitro diagnostics and have contributed greatly to improving public health and making the world a healthier place. The solutions that our teams imagine, develop and manufacture are key to enable healthcare professionals and industry players to make confident decisions to improve patient outcome and ensure consumer safety.

Roche

cb roche.com

Roche is a global pioneer in pharmaceuticals and diagnostics focused on advancing science to improve people’s lives. The combined strengths of pharmaceuticals and diagnostics under one roof have made Roche the leader in personalised healthcare – a strategy that aims to fit the right treatment to each patient in the best way possible. Roche is the world’s largest biotech company, with truly differentiated medicines in oncology, immunology, infectious diseases, ophthalmology and diseases of the central nervous system. Roche is also the world leader in in vitro diagnostics and tissue-based cancer diagnostics, and a frontrunner in diabetes management. Founded in 1896, Roche continues to search for better ways to prevent, diagnose and treat diseases and make a sustainable contribution to society. The company also aims to improve patient access to medical innovations by working with all relevant stakeholders. Thirty medicines developed by Roche are included in the World Health Organization Model Lists of Essential Medicines, among them life-saving antibiotics, antimalarials and cancer medicines. Roche has been recognised as the Group Leader in sustainability within the Pharmaceuticals, Biotechnology & Life Sciences Industry ten years in a row by the Dow Jones Sustainability Indices (DJSI). For more information, please visit https://careers.roche.com Read our community guidelines here: https://www.roche.com/some-guidelines.htm #Roche #Biotechnology #Pharmaceuticals #Diagnostics #Healthcare #PersonalisedHealthcare #GreatPlaceToWork #Innovation

Amgen

amgen.com

Amgen harnesses the best of biology and technology to fight the world’s toughest diseases, and make people’s lives easier, fuller and longer. We helped establish the biotechnology industry, and we remain on the cutting-edge of innovation, using technology and human genetic data to push beyond what’s known today. Our investment in research and development has yielded a robust pipeline that builds on our existing portfolio of medicines to treat cancer, heart disease, osteoporosis, inflammatory diseases and rare diseases. Amgen is one of 30 companies comprising the Dow Jones Industrial Average®, and part of the Nasdaq-100 Index®. In 2024, Amgen was named one of the “World’s Most Innovative Companies” by Fast Company and one of “America’s Best Large Employers” by Forbes. For more information, visit Amgen.com and follow us on X, LinkedIn, Instagram, TikTok, YouTube and Threads. 🔗 Community Guidelines: https://wwwext.amgen.com/community-guidelines 🔗Global Privacy Statement Directory: www.amgen.com/dp Special Advisory: Please be cautious of scam recruitment offers claiming to be from Amgen. Such scams may come from various sources, including fake websites and/or unsolicited emails and seek to obtain personal data or payment from victims by offering jobs that do not exist. Please be advised that Amgen would never ask for payment to progress a job application. When in doubt, please check to see if the position in question is posted on this website before applying. Additionally, please report any suspicious recruiting activity to https://complaint.ic3.gov/ and thank you for your assistance.

The National Institutes of Health

cb nih.gov

NIH is the only agency of its kind. We impact the health of the country and the world through unique and innovative medical research. Did you know that NIH is the largest public funder of biomedical research in the world, investing more than $32 billion a year to enhance life, and reduce illness and disability? NIH funded research has led to breakthroughs and new treatments, helping people live longer, healthier lives, and building the research foundation that drives discovery. Whether you are graduating with a bachelor's degree, working on your doctoral degree, entering the workforce for the first time, or changing careers, NIH offers a place for you to start and plenty of room to grow your career. When you join us, you’re not just advancing your career — you’re driving the health of our country forward. Official LinkedIn Account of the NIH. Privacy policy: http://go.usa.gov/x9svN Comment policy: https://bit.ly/3G6xq94 Engagement ≠ endorsement

Genentech

gene.com

About Genentech We're passionate about finding solutions for people facing the world's most difficult-to-treat conditions. That is why we use cutting-edge science to create and deliver innovative medicines around the globe. To us, science is personal. Making a difference in the lives of millions starts when you make a change in yours. If you’d like to join our team, view our openings at gene.com/careers. Our patient resource center is dedicated to getting patients and caregivers to the right resources. You can reach them at 1 (877) GENENTECH (436-3683) Monday-Friday, 6am-5pm PST or [email protected]. Community Guidelines: 1. We want to foster positive conversation around the issues we are passionate about. To that end, we remove profanity, content that contains threatening language, content that is aimed at private individuals, personal information, and repeated unwanted messages. 2. Don’t mention any medicines by name — ours or anyone else’s. Because of the fair balance rules governing our industry, we cannot post any comments that reference any pharmaceutical brand, product, or service. Please do not mention any specific medicines by name, or include any links to third party sites in your comments. 3. This isn’t the place to report or discuss side effects. This site is not intended as a forum for reporting side effects experienced while taking a Genentech product. Instead, you should report any side effects to Genentech Drug Safety at 1-888-835-2555. You can also report side effects of any prescription product directly to the FDA at 1-800-FDA-1088 or by visiting www.FDA.gov/medwatch. 4. Don’t pitch your product or service. Please don't use our page as a place to promote your product or pitch your services. Please also avoid posting links to external sites. We reserve the right to remove any posts that are deemed promotional.

Loading…

NEWS

ReflectionBio – By Patients, For Patients CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…