Elixir-plug - vulnerabilities (CVEs)

5 CVEs in 4 products, 1 in the last 30 days, newest from 2026-10-23.

Products

CVE-2026-105963 - CVSS 5.1 (medium), 2026-10-23: Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote…
CVE-2026-56813 - CVSS 2.1 (low), 2026-07-10: Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes.…
CVE-2026-56814 - CVSS 6.9 (medium), 2026-07-10: Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all…
CVE-2026-54892 - CVSS 8.7 (high), 2026-06-23: Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service.…
CVE-2026-32688 - CVSS 8.7 (high), 2026-04-27: Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table…