Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse c...
Current section
3 Advisories
Jump to
Current section
3 Advisories
SQL injection via the :comment option in Postgrex.stream/4
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-66838.html
- https://github.com/elixir-ecto/ecto/security/advisories/GHSA-3gww-3f36-2388
- https://github.com/elixir-ecto/postgrex/commit/4011be852c99dc61ddb98cb01aa41e8775a0e3dd
- https://github.com/elixir-ecto/postgrex/commit/e1ecba618ddea4cee2556bd6ad9b6285e05f9d3c
- https://hex.pm/packages/postgrex
SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service
Affected Versions
SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-32687.html
- https://github.com/elixir-ecto/ecto
- https://github.com/elixir-ecto/ecto/security/advisories/GHSA-r73h-97w8-m54h
- https://github.com/elixir-ecto/postgrex/commit/7cdedbd4316bb65f82e6a9a4f922c0ac491cb770
- https://hex.pm/packages/postgrex
- https://nvd.nist.gov/vuln/detail/CVE-2026-32687
- https://osv.dev/vulnerability/EEF-CVE-2026-32687
