Skip to content
OpenAdvisories

Package · Hex

ecto

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.9
    CVE-2026-118391

    Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

    Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where …

    elixir-ecto ecto ecto Hex
  • Critical 9.8
    CVE-2017-20166

    Ecto missing `is_nil` requirement

    Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.

    ecto Hex