Skip to content
OpenAdvisories

Vendor

elixir-plug

6 known vulnerabilities.

Products

plug 5 plug_crypto 1 plug_cowboy 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-105963

    Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

    Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every publ…

    elixir-plug plug plug_crypto plug Ubuntu Hex
  • Medium 6.9
    CVE-2026-56814

    Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

    Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed resources, allowing an unauthenticated remote attacker to cause denial of service. The parser c…

    elixir-plug plug plug Hex