Skip to content
OpenAdvisories

Product · elixir-plug

plug_cowboy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-32688

    Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy

    Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion. Plug.Cowboy.Conn.conn/1 in lib/plug/cowboy/conn.ex calls String.to_atom/1 on the value ret…

    elixir-plug plug_cowboy plug_cowboy Hex