Skip to content
OpenAdvisories

Product · elixir-ecto

postgrex

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-58225 Public exploit

    SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service

    SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection. Postgrex.Notifications sanitizes channel …

    elixir-ecto postgrex postgrex Hex