Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

hex

plug

hex

Compose web applications with functions

View on github.com · View on hex.pm

Security Advisories for plug in hex

Low
about 2 months ago

Cookie attribute injection in Plug.Conn.Cookies.encode/2 EEF-CVE-2026-56813

hex plug
Medium
about 2 months ago

Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) EEF-CVE-2026-56814

hex plug
High
2 months ago

Plug: quadratic-time decoding of nested query/body parameters enables denial of service EEF-CVE-2026-54892

hex plug
High
3 months ago

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service GSA_kwCzR0hTQS00NjhjLXZxN3AtZ2g2NM4ABXJu

hex plug
High
4 months ago

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug EEF-CVE-2026-8468

hex plug
Moderate
over 4 years ago

Header Injection GSA_kwCzR0hTQS05aDczLXc3Y2gtcmg3M806nw

hex plug
High
over 4 years ago

Arbitrary Code Execution in Cookie Serialization GSA_kwCzR0hTQS01djRtLWM3M3YtYzdncc06ng

hex plug
High
over 4 years ago

Null Byte Injection in Plug.Static GSA_kwCzR0hTQS0ycTZ2LTMybXItOHA4eM06nQ

hex plug

Filter by Severity

High 5 Moderate 1 Medium 1 Low 1