Elixir-Ecto

3 CVEs in 1 Elixir-Ecto product, including Postgrex. Newest: CVE-2026-66838 (2026-08-07). Severity, EPSS and public exploits for each.

Elixir-Ecto products with known CVEs

ProductCVEs
Postgrex3
Elixir-Ecto CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66838High8.22026-08-07Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :commen…
CVE-2026-582252026-07-10SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, c…
CVE-2026-32687High7.82026-05-12Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' mod…