elixir-lang

Products

ProductCVEsExploitedLatest
elixir5–Oct 30, 2026

Exploited and recent CVEs

  • CVE-2026-97209 Medium 5.4 Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build 0.1%
  • CVE-2026-115274 Medium 6.9 Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir 0.5%
  • CVE-2026-109821 Medium 6.3 Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir 0.5%
  • CVE-2026-75758 Medium 5.9 Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir 0.2%
  • CVE-2026-49762 Medium 5.1 Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service 0.2%