Eelixir-plug

Products

Exploited and recent CVEs

• CVE-2026-105963 Medium 5.1 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments 0.5%
• CVE-2026-105963 Medium 5.1 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments 0.5%
• CVE-2026-56813 Low 2.1 Cookie attribute injection in Plug.Conn.Cookies.encode/2 0.2%
• CVE-2026-56814 Medium 6.9 Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) 1.1%
• CVE-2026-54892 High 8.7 Plug: quadratic-time decoding of nested query/body parameters enables denial of service 0.9%
• CVE-2026-8468 High 8.2 Unbounded buffer accumulation in multipart header parsing causes denial of service in plug 0.6%
• CVE-2026-32688 High 8.7 Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy 0.5%