Skip to content
OpenAdvisories

Product · elixir-ecto

postgrex

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-32687

    SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Notifications':listen/3 a…

    elixir-ecto postgrex postgrex Hex