Skip to content
OpenAdvisories

Product · elixir-plug

plug_crypto

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-105963

    Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

    Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every publ…

    elixir-plug plug plug_crypto plug Ubuntu Hex