elixir-ecto vulnerabilities
4 published CVEs name elixir-ecto among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118391
Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto
elixir-ecto · ecto
High8.9 - CVE-2026-66838
SQL injection via the :comment option in Postgrex.stream/4
elixir-ecto · postgrex
Medium5.9 - CVE-2026-58225
SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service
elixir-ecto · postgrex
Low2.1 - CVE-2026-32687
SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
elixir-ecto · postgrex
High7.5