elixir

5 results · Feed

• Medium 5.4
  CVE-2026-97209

  Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

  Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned dependency compilation passes the project configuration to each partition VM through a f…

  elixir-lang elixir elixir elixir-lang Debian Ubuntu
  Oct 30, 2026
• Medium 6.9
  CVE-2026-115274

  Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

  Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSO…

  elixir-lang elixir elixir elixir-lang Debian Ubuntu
  Oct 30, 2026
• Medium 6.3
  CVE-2026-109821

  Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

  Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.to_inte…

  elixir-lang elixir elixir elixir-lang Debian Ubuntu
  Oct 30, 2026
• Medium 5.9
  CVE-2026-75758

  Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir

  Uncontrolled Recursion vulnerability in the Elixir standard library allows an attacker who controls a list passed to inspect/1, List.to_string/1, or List.to_charlist/1 to exhaust a BEAM node's memory. Inspect.List's charlist branch in lib/elixir/lib/inspect.e…

  elixir-lang elixir elixir elixir-lang Debian Ubuntu Alpine
  Aug 28, 2026
• Medium 5.1
  CVE-2026-49762

  Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service

  Uncontrolled Resource Consumption vulnerability in the Elixir standard library's Version module allows an attacker who controls a version string to cause a denial of service through CPU and memory exhaustion. The version parser converts numeric version compon…

  elixir-lang elixir elixir-lang elixir-lang Debian Ubuntu
  Jun 9, 2026