Skip to content
OpenAdvisories

Package · Hex

postgrex

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-66838

    SQL injection via the :comment option in Postgrex.stream/4

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimi…

    elixir-ecto postgrex postgrex Hex