Skip to content
OpenAdvisories

Vendor

elixir-ecto

4 known vulnerabilities.

Products

postgrex 3 ecto 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.9
    CVE-2026-118391

    Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

    Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where …

    elixir-ecto ecto ecto Hex
  • High 7.5
    CVE-2026-32687

    SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Notifications':listen/3 a…

    elixir-ecto postgrex postgrex Hex