Ecosystem
Hex
356 known vulnerabilities.
Most affected packages
ash 31
bandit 24
ash_authentication 24
hackney 17
mint 14
mpp 13
jose 9
ash_typescript 8
plug 8
cowlib 8
ash_ai 8
ash_admin 7
mdex 6
livebook 6
html_sanitize_ex 6
ash_graphql 6
ash_authentication_oauth2_server 6
hex_core 5
phoenix 5
tesla 5
ash_sql 5
esaml 4
ash_postgres 4
gun 4
grpc 4
mdex_native 4
guardian 4
cowboy 4
ash_phoenix 4
rabbit_common 4
ash_authentication_phoenix 3
postgrex 3
phoenix_storybook 3
xml_builder 3
saxy 3
samly 3
boruta 3
ash_paper_trail 3
ewe 3
beam_mcp 2
2 results · Clear filters · Feed
-
Critical 9.2
Out-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …
KEV Oct 27, 2026 -
Critical 9.5CVE-2026-8467 Public exploit
Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground
Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx template generation. The psb-assign WebSocket event handler in 'Elixir.PhoenixStorybook.Story.Pl…