Plug (Elixir-plug) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-23. Vendor: Elixir-plug.

CVEs of Plug

• CVE-2026-105963 - CVSS 5.1 (medium), 2026-10-23: Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote…
• CVE-2026-56813 - CVSS 2.1 (low), 2026-07-10: Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes.…
• CVE-2026-56814 - CVSS 6.9 (medium), 2026-07-10: Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all…
• CVE-2026-54892 - CVSS 8.7 (high), 2026-06-23: Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service.…