Skip to content
OpenAdvisories

Ecosystem

Hex

356 known vulnerabilities.

Most affected packages

ash 31 bandit 24 ash_authentication 24 hackney 17 mint 14 mpp 13 jose 9 ash_typescript 8 plug 8 cowlib 8 ash_ai 8 ash_admin 7 mdex 6 livebook 6 html_sanitize_ex 6 ash_graphql 6 ash_authentication_oauth2_server 6 hex_core 5 phoenix 5 tesla 5 ash_sql 5 esaml 4 ash_postgres 4 gun 4 grpc 4 mdex_native 4 guardian 4 cowboy 4 ash_phoenix 4 rabbit_common 4 ash_authentication_phoenix 3 postgrex 3 phoenix_storybook 3 xml_builder 3 saxy 3 samly 3 boruta 3 ash_paper_trail 3 ewe 3 beam_mcp 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-111497 Exploited Public exploit EPSS 83%

    Out-of-Bounds Write in Google Brotli Decoder

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

    Google Brotli nodejs dotnet7 Debian Ubuntu Alpine PyPI Go Hex
    KEV Oct 27, 2026