Description
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Hex | ecto | >= 2.2.0, < 2.2.1 | 2.2.1 | GHSA-2xxx-fhc8-9qvq |
Critical · 9.8
CVE-2017-20166
EUVD-2023-0331GHSA-2xxx-fhc8-9qvqGHSA-4r2f-6fm9-2qgh
Ecto missing `is_nil` requirement
Published Jan 10, 2023 · Updated Apr 9, 2025 · Assigned by mitre