Skip to content
OpenAdvisories

Package · Hex

plug

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-105963

    Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

    Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every publ…

    elixir-plug plug plug_crypto plug Ubuntu Hex
  • Medium 6.9
    CVE-2026-56814

    Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

    Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed resources, allowing an unauthenticated remote attacker to cause denial of service. The parser c…

    elixir-plug plug plug Hex
  • Medium 6.5
    CVE-2018-1000883

    Header Injection

    Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack appear to be exploitable via Crafting a value to be sent as a cookie. This vulnerability appears to…

    plug Hex