Elixir-Plug

2 CVEs across 3 Elixir-Plug products. Browse Elixir-Plug vulnerabilities, severities, and proof-of-concept exploits.

Elixir-Plug products with known CVEs

ProductCVEs
Plug4
Plug.cowboy1
Plug Cowboy1
Elixir-Plug CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-568132026-07-10Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes. Th…
CVE-2026-568142026-07-10Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all cons…
CVE-2026-548922026-06-23Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause denial of service. Plug.Conn.Query.dec…
CVE-2026-84682026-05-14Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in multipart…
CVE-2026-32688High7.52026-04-27Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table ex…