Skip to content
OpenAdvisories

Package · Hex

postgrex

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.9
    CVE-2026-66838

    SQL injection via the :comment option in Postgrex.stream/4

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimi…

    elixir-ecto postgrex postgrex Hex
  • Low 2.1
    CVE-2026-58225 Public exploit

    SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service

    SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection. Postgrex.Notifications sanitizes channel …

    elixir-ecto postgrex postgrex Hex
  • High 7.5
    CVE-2026-32687

    SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Notifications':listen/3 a…

    elixir-ecto postgrex postgrex Hex