Skip to content
Eelixir-ecto
Products
| Product | CVEs | Exploited | Latest |
|---|
| postgrex | 3 | – | Aug 7, 2026 |
| ecto | 1 | – | Nov 4, 2026 |
Exploited and recent CVEs
-
CVE-2026-118391
High 8.9
Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto
0.5%
-
CVE-2026-66838
Medium 5.9
SQL injection via the :comment option in Postgrex.stream/4
0.4%
-
CVE-2026-58225
Low 2.1
SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service
0.2%
-
CVE-2026-32687
High 7.5
SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
0.2%