Skip to content
OpenAdvisories

Vendor

elixir-plug

6 known vulnerabilities.

Products

plug 5 plug_crypto 1 plug_cowboy 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.1
    CVE-2026-56813

    Cookie attribute injection in Plug.Conn.Cookies.encode/2

    Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes. The Plug.Conn.Cookies.encode/2 function in lib/plug/conn/cookies.ex builds the Set-Cookie response head…

    elixir-plug plug plug Hex