Skip to content
OpenAdvisories

Package · Hex

absinthe_plug

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-42794

    Reflected XSS via backslash bypass in GraphiQL js_escape in absinthe_plug

    Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface. 'Elixir.Absinthe.Plug.GraphiQL':js_escape/1 in lib/absinthe/plug/graphiql.ex es…

    absinthe-graphql absinthe_plug absinthe_plug Hex