Skip to content
OpenAdvisories

Vendor

elixir-ecto

4 known vulnerabilities.

Products

postgrex 3 ecto 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-66838

    SQL injection via the :comment option in Postgrex.stream/4

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimi…

    elixir-ecto postgrex postgrex Hex