Skip to content
OpenAdvisories

Package · Hex

oban_web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-48592

    Missing authorization check on save-job event handler in oban_web

    Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution. The handle_event("save-job", ...) handler in 'Elixir.Oban.Web.Jobs.DetailComponent' does not perform an autho…

    oban-bg oban_web oban_web Hex
  • Medium 5.9
    CVE-2026-48593

    Unbounded range expansion in cron describe causes memory exhaustion in oban_web

    Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion. An attacker with access to schedule cron jobs can submit a malicious cron expression such as …

    oban-bg oban_web oban_web Hex