Plug (Plug Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 88 known versions, newest CVE from 2026-05-14. Vendor: Plug Project.

CVEs of Plug

• CVE-2026-8468 - CVSS 8.2 (high), 2026-05-14: Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in…
• CVE-2018-1000883 - CVSS 6.5 (medium), 2018-12-20: Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This…
• CVE-2017-1000053 - CVSS 8.1 (high), 2017-07-17: Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.
• CVE-2017-1000052 - CVSS 7.8 (high), 2017-07-17: Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass…