elixir-lang vulnerabilities

Newest CVEs

• CVE-2026-97209

  Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build

  elixir-lang · elixir

  Medium5.4
• CVE-2026-115274

  Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir

  elixir-lang · elixir

  Medium6.9
• CVE-2026-109821

  Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir

  elixir-lang · elixir

  Medium6.3
• CVE-2026-75758

  Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir

  elixir-lang · elixir

  Medium5.9
• CVE-2026-49762

  Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service

  elixir-lang · elixir

  Medium5.1