Ecosystem
Hex
356 known vulnerabilities.
Most affected packages
ash 31
bandit 24
ash_authentication 24
hackney 17
mint 14
mpp 13
jose 9
ash_typescript 8
plug 8
cowlib 8
ash_ai 8
ash_admin 7
mdex 6
livebook 6
html_sanitize_ex 6
ash_graphql 6
ash_authentication_oauth2_server 6
hex_core 5
phoenix 5
tesla 5
ash_sql 5
esaml 4
ash_postgres 4
gun 4
grpc 4
mdex_native 4
guardian 4
cowboy 4
ash_phoenix 4
rabbit_common 4
ash_authentication_phoenix 3
postgrex 3
phoenix_storybook 3
xml_builder 3
saxy 3
samly 3
boruta 3
ash_paper_trail 3
ewe 3
beam_mcp 2
2 results · Clear filters · Feed
-
Low 2.1CVE-2026-58225 Public exploit
SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service
SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection. Postgrex.Notifications sanitizes channel …
-
Low 2.1CVE-2026-48598 Public exploit
CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection
Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.part_headers_for_disposition/1 interpolates each disposition parameter as #{…