What is the official website of R&B Fashion ?

The official website of R&B Fashion is http://www.randbfashion.com.

What is R&B Fashion's cybersecurity risk score?

R&B Fashion has an AI-generated cybersecurity risk score of 763 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has R&B Fashion experienced?

According to Rankiteo, R&B Fashion currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has R&B Fashion been affected by any supply chain cyber incidents ?

According to Rankiteo, R&B Fashion has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does R&B Fashion have SOC 2 Type 1 certification ?

According to Rankiteo, R&B Fashion is not certified under SOC 2 Type 1.

Does R&B Fashion have SOC 2 Type 2 certification ?

According to Rankiteo, R&B Fashion does not hold a SOC 2 Type 2 certification.

Does R&B Fashion comply with GDPR ?

According to Rankiteo, R&B Fashion is not listed as GDPR compliant.

Does R&B Fashion have PCI DSS certification ?

According to Rankiteo, R&B Fashion does not currently maintain PCI DSS compliance.

Does R&B Fashion comply with HIPAA ?

According to Rankiteo, R&B Fashion is not compliant with HIPAA regulations.

Does R&B Fashion have ISO 27001 certification ?

According to Rankiteo,R&B Fashion is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does R&B Fashion operate in ?

R&B Fashion operates primarily in the Retail Apparel and Fashion industry.

How many employees does R&B Fashion have ?

R&B Fashion employs approximately 171 people worldwide.

Does R&B Fashion own any subsidiaries ?

R&B Fashion presently has no subsidiaries across any sectors.

How many LinkedIn followers does R&B Fashion have ?

R&B Fashion's official LinkedIn profile has approximately 8,953 followers.

What is the NAICS classification code for R&B Fashion ?

R&B Fashion is classified under the NAICS code 448, which corresponds to Clothing and Clothing Accessories Stores.

Does R&B Fashion have a Crunchbase profile ?

No, R&B Fashion does not have a profile on Crunchbase.

Does R&B Fashion have a LinkedIn profile ?

Yes, R&B Fashion maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rnbarabia.

How many cybersecurity incidents has R&B Fashion experienced ?

As of August 2, 2026, Rankiteo reports that R&B Fashion has not experienced any cybersecurity incidents.

How many peer or competitor companies does R&B Fashion have ?

R&B Fashion has an estimated 5,072 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

R&B Fashion

Boost Score +25 with badge (5 left)

763

/1000

Fair

788

/1000

Fair

R&B Fashion Vendor Cyber Rating & Cyber Score

randbfashion.com

Add Your Compliance Badge

Founded in 2012, R&B today is the fastest growing value fashion retailer in the GCC & India, offering latest fashion at affordable prices. R&B currently has over 158 stores across the Middle East and India along with online shopping platform (www.randbfashion.com) for customer convenience in key markets. With the single aim of addressing the fashion needs of every individual customer in the family, offering them good quality at amazing value. R&B retails its own label of apparel for men, women and children along with footwear, accessories, cosmetics and household products. R&B strives to bring the most dynamic offering of value fashion and merchandise, designed in-house and manufactured to stringent quality standards. While the fashion

R&B Fashion A.I CyberSecurity Scoring

Scoring History

R&B Fashion

R&B Fashion CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

R&B Fashion Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for R&B Fashion

Incidents vs Retail Apparel and Fashion Industry Avg (This Year)

No incidents recorded for R&B Fashion in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for R&B Fashion in 2026.

Incident Types R&B Fashion vs Retail Apparel and Fashion Industry Avg (This Year)

No incidents recorded for R&B Fashion in 2026.

Incident History - R&B Fashion (X = Date, Y = Severity)

Loading…

SUBSIDIARY

R&B Fashion Subsidiaries

R&B Fashion

Retail Apparel and Fashion

Website: http://www.randbfashion.com

Company Size: 1,001-5,000 employees

Apparel GroupRetail

6thStreet.comRetail

Apparel Group India Pvt. Ltd.Retail

Tim Hortons - Middle EastFood and Beverage Services

Loading…

R&B Fashion Similar Companies

J.Crew

jcrew.com

Since 1983, we’ve been designing pieces that feel both familiar and refreshingly new, crafted with unbeatable quality and distinctive point of view...it’s no wonder we’ve been in your closet for four decades and counting. Today, we continue to do the classics our way, inspiring not only how you shop but also how you express your personal style. Our commitment runs deeper than just making great clothes—we're proud of our role in getting you dressed with confidence, character and the unique style sensibility that makes us who we are.

Bata Group

cb bata.com

The Bata Group is one of the world's leading manufacturers and retailers of quality footwear. A global concern with more than 32,000 employees, 21 production facilities, over 5,300 stores in more than 70 countries across the globe, Bata has been providing the best shoes at the best prices, backed by unparalleled service, for 125+ years. Since its founding on September 21, 1894, by Thomas Bata, the company has consistently demonstrated its commitment to responsible and innovative business models in the belief that capital is not just money, buildings or technology, but, more importantly, people, knowledge and core values. This visionary approach has enabled the company to meet each new challenge with creativity and foresight, while earning the trust and confidence of customers, employees and the communities in which it does business. Today, Bata's pioneering decentralized production system, featuring semi-autonomous regional facilities guided by three regional business units, allows the company to quickly adapt to changes in the marketplace and seize potential growth opportunities. It also continues Bata's long tradition of being sensitive to cultural and national differences, and enables it to proudly function as a local company in every country it serves. Follow us on facebook.com/bata

Under Armour

underarmour.com

Our Belief: WE USE THE POWER OF SPORTS TO EXPAND EVERY PLAYING FIELD. Our Obsession: WE ARE OBSESSED WITH ATHLETES WHO STRIVE FOR MORE – IN SPORTS, IN LIFE, AND IN THE WORLD. Our Mission: TO INSPIRE ATHLETES WITH INNOVATIVE PERFORMANCE AND DESIGN SOLUTIONS THEY CAN’T LIVE WITHOUT. Our Values: LOVE ATHLETES We believe in waking up every morning to make athletes legendary. From the best of the best to the ones just getting started, we put the athlete at the center of everything we do. We create fearlessly with the courage and conviction to defy convention. We innovate by taking bold and smart risks. We show up big where athletes train, compete, and recover. CELEBRATE THE WINS We believe our victories, big and small, bring us together as a team. We celebrate our accomplishments, giving credit where it's due. We take time to have fun. We channel past successes to inspire our next win. STAND FOR EQUALITY We believe sport is the great unifier. We don't sit on the sidelines; we speak up for fairness and equity. We treat each other with respect. We apply different perspectives in our work. We come together as a force for good to serve the communities we represent. ACT SUSTAINABLY We believe our work is not just what we do but how we do it. We work ethically and efficiently to perfect performance while reusing the Earth's resources. We seek new information to develop lasting solutions. We protect our planet for all who now play, and all who will play, on our home field. FIGHT ON TOGETHER We believe strength is built through tackling adversity. We act with an enterprise mindset in the best interest of the Brand. We help each other overcome obstacles. We act with integrity, have honest conversations and grow over mistakes. We approach challenges with positive intent and never quit.

Tailored Brands, Inc.

cb tailoredbrands.com

Our Purpose: We help people love the way they look and feel for their most important moments. Our Values: • Customer-First - We put customers at the center of every decision • Win Together - We rally together to achieve common goals • Better Every Day - We strive for excellence and continuous improvement • Everyone Is Welcome - We value differences and know they make us better • Act With Integrity - We show up with courage to always do the right thing

Tapestry

tapestry.com

Our global house of brands unites the magic of Coach and Kate Spade New York. By intertwining different people and ideas, we push ourselves in our work and expand the bounds of possibility. Learn about our iconic brands: tapestry.com/our-brands We’ve grown by finding people dedicated to the dream all over the world. We hold ourselves to high standards in every material and process, and we embrace difference by design because diverse perspectives are at the heart of creativity. We find brilliance in the intersections—of beauty and function, of heritage and innovation, of accessibility and aspiration—which is how we bring together magic and logic in our craft. Find out about our people and employer priorities: tapestry.com/responsibility/our-people The result is that we stand taller together, elevating the best in our people and brands. We use our collective strengths to move our customers and empower our communities, to make the fashion industry sustainable, and to build a house that’s equitable, inclusive, and diverse. Individually, our brands are iconic. Together, we can stretch what’s possible. See our values and commitments to support our people, communities and planet: tapestry.com/responsibility __ Please Be Advised - Recruitment Scams: Tapestry and its brands will only reach out to interview, make an offer of employment or conduct onboarding activities for candidates who have applied through our careers site. If you find a job posting on a third-party job site, such as LinkedIn, please know that a legitimate posting will direct you to our careers site to apply. When interviewing for a position, the candidate experience will include live interaction, such as a video conference or phone call, with a Recruiter and/or company employee(s). Be aware of suspicious recruitment activity. If you think you are a victim of an employment scam, please visit the Federal Trade Commission website: https://www.consumer.ftc.gov/articles/0243-job-scams

C&A Brasil

cea.com.br

A C&A foi fundada em 1841 pelos irmãos holandeses Clemens e August. Suas iniciais deram origem ao nome da marca. Somamos mais de 1,8 mil unidades em 24 países da Europa, América Latina e Ásia e estamos entre as maiores redes de varejo do mundo. No Brasil, tudo começou em 1976, com a inauguração da nossa primeira loja no Shopping Ibirapuera, em São Paulo. Claro que, desde lá, muita coisa mudou. Mas nossa filosofia de trabalho continua a mesma – oferecer o melhor da moda por preços acessíveis! Hoje já temos mais de 330 lojas em 150 cidades e mais de 15 mil profissionais empregados. Muita gente, não é!? E sabe qual é o segredo do nosso sucesso? Além da busca constante por inovação, há também nosso esforço para superar as expectativas das pessoas e deixar um legado positivo. Desde outubro de 2019 somos uma empresa listada na Bolsa brasileira (B3), com destaque no varejo brasileiro em aspectos que englobam desde a sustentabilidade na rede de fornecimento até a jornada omnicanal oferecida a nossa cliente. Missão e valores Somos uma empresa inovadora, divertida e, acima de tudo, apaixonada pelas pessoas. Ao longo de mais de 180 anos de história, atuamos com ética e foco para que você e todos os nossas clientes estejam sempre satisfeitos. A responsabilidade social e a transparência acompanham a a marca desde o início e são compartilhadas com quem nos relacionamos - funcionários, fornecedores, clientes, investidores e a comunidade. Publicamos anualmente o Relatório de Sustentabilidade, reforçando o compromisso com a transparência em todas as áreas de atuação da empresa e construindo uma moda com impacto positivo. Informamos que tópicos de publicidade, spam ou que não estiverem de acordo com a proposta desta página serão removidos.

MANGO

mango.com

Mango, one of the leading international fashion groups, is a global company with design and creativity at the heart of its business model and a strategy based on constant innovation, the pursuit of sustainability and a complete ecosystem of channels and partners. With its roots in Barcelona, one of the cradles of the textile industry, since it was founded in 1984, Mango has spent four decades looking to the future and inspiring the world with its passion for fashion and lifestyle. With the customer always its priority, the company bases its model on a unique fashion proposal focused on translating key fashion trends into its own language. At the Campus Mango, located at the company headquarters (Palau-solità i Plegamans, Barcelona), the company works on all areas related to creativity and every year creates over 18,000 garments and accessories. Present in more than 120 markets and with a network of 2,900 points of sales, Mango adapts to each country with a complete ecosystem of channels and international partners. The company closed 2024 with a turnover of 3.3 billion euros, with 32% of turnover coming from its online channel and with a workforce of more than 16,400 employees in all five continents. More information at www.mangofashiongroup.com

Aditya Birla Fashion and Retail Ltd.

abfrl.com

Aditya Birla Fashion and Retail Limited (ABFRL), part of the Aditya Birla Group, is India’s leading fashion powerhouse, offering a distinguished portfolio of renowned brands and retail formats, catering to multiple high-growth segments. As of March 31, 2025, the Company has presence across 1,167 stores spanning 7.3 Mn sq.ft. retail space. ABFRL’s portfolio includes Pantaloons, one of India’s most loved fashion destinations, and OWND!, a growing value retail format. The Company also operates The Collective, who commands a dominant position as one of the country’s most influential multi-brand luxury retailers, with exclusive long-term tie-ups with global fashion brands including Ralph Lauren, Hackett London, Ted Baker and Fred Perry. ABFRL has also partnered with Paris based Galeries Lafayette to introduce a high-end luxury destination in India. ABFRL is a market leader in branded ethnic wear, its portfolio includes Jaypore, Tasva and TCNS brands and it has forged strategic partnerships with India’s top designers such as Shantnu & Nikhil, Tarun Tahiliani, Sabyasachi, and House of Masaba. Recently, the Company further expanded its ethnic wear leadership with the integration of TCNS brands, home to leading women’s brands W, Aurelia, Wishful, Elleven and Folksong. To address the evolving preferences of digitally native consumers, ABFRL is also building a portfolio of new-age, digital-first fashion brands under its tech-led venture TMRW. This platform collaborates with emerging entrepreneurs to co-create scalable fashion businesses in India’s rapidly expanding fashion ecosystem.

Saks Global

saksglobal.com

Saks Global is the largest multi-brand luxury retailer in the world, comprising Saks Fifth Avenue, Neiman Marcus, Bergdorf Goodman, Saks OFF 5TH, Last Call and Horchow. Its retail portfolio includes 70 full-line luxury locations, additional off-price locations and five distinct e-commerce experiences. With talented colleagues focused on delivering on our strategic vision, The Art of You, Saks Global is redefining luxury shopping by offering each customer a personalized experience that is unmistakably their own. By leveraging the most comprehensive luxury customer data platform in North America, cutting-edge technology, and strong partnerships with the world's most esteemed brands, Saks Global is shaping the future of luxury retail. Saks Global Properties & Investments includes Saks Fifth Avenue and Neiman Marcus flagship properties and represents nearly 13 million square feet of prime U.S. real estate holdings and investments in luxury markets. Interested in joining our world-class team of professionals? Visit https://careers.saksglobal.com/us/en to explore career opportunities across Saks Global.

Loading…

NEWS

R&B Fashion CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 02, 2026 02:13 AM

Lillian Struckus Obituary (2026) - Westfield, MA

Lillian R. StruckusWestfieldLillian R. Struckus, 90, of Westfield, formerly of Florence and Worcester died Dec. 25, 2025 in the care of the Fisher Home,...

Read Article

April 02, 2026 01:38 AM

Republican Leaders in Congress Say They’ll Pursue a Path to Ending the Homeland Security Shutdown

House Speaker Mike Johnson and Senate Majority Leader John Thune announced Wednesday what they are calling a path forward to fully funding...

Read Article

April 02, 2026 01:11 AM

George Hodgins Obituary (2026) - Granby, MA

George R. Hodgins1926 - 2026GranbyGeorge Raymond Hodgins, 99, passed away on March 17, 2026. Born on May 24th, 1926, In East Rockaway,...

Read Article

April 02, 2026 12:52 AM

A/C Expansion Valve For Mercedes-Benz GL/ML/R-Class – Improves Cooling Performance

For Mercedes-Benz GL/ML/R-Class – Improves Cooling Performance A/C Expansion Valve.

Read Article

April 02, 2026 12:23 AM

Daniel R. Kincaid Obituary (2026) - Bethlehem, PA - Cantelmi Long Funeral Home - Bethlehem

Daniel Kincaid Obituary Daniel R. "Danny" Kincaid, 79, of Bethlehem, passed away peacefully on March 30, 2026, at home surrounded by his...

Read Article

April 01, 2026 11:56 PM

R-OPUS Inc. discloses 4,412,222 OFA Group (OFAL) shares in Form 3 filing

R-OPUS Inc. files Form 3 showing beneficial ownership of 4412222 OFA Group Class A shares, with director Weiyi Yu holding voting and...

Read Article

April 01, 2026 11:45 PM

Charles R. Henderson Jr. Obituary February 20, 2026

At this time, the family has chosen to not publish an obituary or service information for their loved one.

Read Article

April 01, 2026 11:43 PM

Republican leaders in Congress announce plan to end Homeland Security shutdown

House Speaker Mike Johnson and Senate Majority Leader John Thune have announced a plan to fully fund the Department of Homeland Security and...

Read Article

April 01, 2026 11:35 PM

Aubrey Plaza’s Raunchy, R-Rated Comedy Is Equal Parts Profound And Disturbing

In 1998, singer-songwriter Cher once asked us all if we believed in life after love, and we were all supposed to nod our heads in unison,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…