# cve.now: Hex packages

The newest entries affecting Hex packages (up to 200). To check exact package versions, use the MCP stack.check operation or /stack.

- [CVE-2026-124279](https://cve.now/CVE-2026-124279.md): gRPC Server denial of service in Elixir streaming request body limits (CVSS 8.2, elixir-grpc grpc\_server · grpc\_server)
- [CVE-2026-121809](https://cve.now/CVE-2026-121809.md): Denial of service in streaming RPC handling (CVSS 8.2, elixir-grpc grpc\_server · elixir-grpc grpc +2)
- [CVE-2026-124278](https://cve.now/CVE-2026-124278.md): Authorization bypass in HTTP-transcoded routes (CVSS 7.6, elixir-grpc grpc\_server · elixir-grpc grpc +2)
- [CVE-2026-121808](https://cve.now/CVE-2026-121808.md): Memory exhaustion in Erlpack codec (CVSS 8.2, elixir-grpc grpc · elixir-grpc grpc\_core +2)
- [CVE-2026-123635](https://cve.now/CVE-2026-123635.md): gRPC Server denial of service via HTTP/2 flow-control leak (CVSS 6.3, elixir-grpc grpc\_server · grpc\_server)
- [CVE-2026-119613](https://cve.now/CVE-2026-119613.md): AshAi sends unrecognized tool errors verbatim to MCP clients and the model, disclosing internal details (CVSS 5.3, ash-project ash\_ai · ash\_ai)
- [CVE-2026-71397](https://cve.now/CVE-2026-71397.md): Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc\_server (CVSS 8.2, elixir-grpc grpc\_server · grpc\_server)
- [CVE-2026-115701](https://cve.now/CVE-2026-115701.md): Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion (CVSS 8.2, ninenines cowboy · cowboy)
- [CVE-2026-113431](https://cve.now/CVE-2026-113431.md): Unbounded decoded HTTP/2 header-list size in cowlib cow\_http2\_machine enables HPACK amplification memory exhaustion (CVSS 8.7, ninenines cowlib · cowlib)
- [CVE-2026-66294](https://cve.now/CVE-2026-66294.md): XML injection in Saxy via unescaped CDATA section terminator (CVSS 2.1, qcam saxy · saxy)
- [CVE-2026-66295](https://cve.now/CVE-2026-66295.md): Processing instruction target and content emitted unescaped in Saxy encoder allows XML injection (CVSS 2.1, qcam saxy · saxy)
- [CVE-2026-66293](https://cve.now/CVE-2026-66293.md): XML comment injection in Saxy encoder via unescaped double hyphen (CVSS 2.1, qcam saxy · saxy)
- [CVE-2026-119434](https://cve.now/CVE-2026-119434.md): Decompression bomb in ezstd:decompress\_using\_ddict/2 allows BEAM memory exhaustion via unbounded output buffer (CVSS 6.9, silviucpp ezstd · ezstd)
- [CVE-2026-118391](https://cve.now/CVE-2026-118391.md): Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto (CVSS 8.9, elixir-ecto ecto · ecto)
- [CVE-2026-110826](https://cve.now/CVE-2026-110826.md): AshAuthentication log\_out\_everywhere leaves sessions valid after a password reset or non-atomic password change (CVSS 6.3, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-118505](https://cve.now/CVE-2026-118505.md): AshAuthentication brute\_force\_strategy does not limit sign-in and request actions defined on the resource (CVSS 6.3, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-119215](https://cve.now/CVE-2026-119215.md): AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account (CVSS 7.6, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-117680](https://cve.now/CVE-2026-117680.md): jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not (CVSS 2.1, lud jsv · jsv)
- [CVE-2026-117656](https://cve.now/CVE-2026-117656.md): Unverified Sign in with Apple callback parameter can override verified ID token claims (CVSS 9.3, pow-auth assent · assent)
- [CVE-2026-117645](https://cve.now/CVE-2026-117645.md): Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes\_escape/1 (CVSS 5.3, phoenixframework phoenix\_html · phoenix\_html)
- [CVE-2026-117666](https://cve.now/CVE-2026-117666.md): ssl\_verify\_fun: partial-label wildcard certificate matches hostnames across a label boundary (CVSS 9.1, deadtrickster ssl\_verify\_fun · ssl\_verify\_fun)
- [CVE-2026-116078](https://cve.now/CVE-2026-116078.md): HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-109823](https://cve.now/CVE-2026-109823.md): Host filesystem path disclosure via DNS rebinding (CVSS 2.3, tidewave-ai tidewave · tidewave)
- [CVE-2026-65630](https://cve.now/CVE-2026-65630.md): Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65632](https://cve.now/CVE-2026-65632.md): ECDSA signature length is not validated in jose, allowing signature malleability (CVSS 5.1, potatosalad jose · jose)
- [CVE-2026-65631](https://cve.now/CVE-2026-65631.md): erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service (CVSS 6.9, potatosalad jose · jose)
- [CVE-2026-65629](https://cve.now/CVE-2026-65629.md): Weak PBKDF2 parameters for password-encrypted private-key export in jose (CVSS 7.4, potatosalad jose · jose)
- [CVE-2026-65628](https://cve.now/CVE-2026-65628.md): Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared\_secret/2 on mismatched key types (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65627](https://cve.now/CVE-2026-65627.md): Decompression bomb via unbounded zlib:inflate in jose\_jwe\_zip:uncompress/2 (CVSS 6.9, potatosalad jose · jose)
- [CVE-2026-65626](https://cve.now/CVE-2026-65626.md): Bleichenbacher padding oracle in RSAES-PKCS1-v1\_5 decryption in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65625](https://cve.now/CVE-2026-65625.md): Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-97200](https://cve.now/CVE-2026-97200.md): Unbounded response body buffering and decompression in hackney (CVSS 8.2, benoitc hackney · hackney)
- [CVE-2026-115693](https://cve.now/CVE-2026-115693.md): Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney (CVSS 9.1, benoitc hackney · hackney)
- [CVE-2026-113440](https://cve.now/CVE-2026-113440.md): HTTP/1.1 and HTTP/2 redirects resend basic\_auth and cookie to a different scheme or port in hackney (CVSS 6.0, benoitc hackney · hackney)
- [CVE-2026-115700](https://cve.now/CVE-2026-115700.md): SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney (CVSS 6.9, benoitc hackney · hackney)
- [CVE-2026-112880](https://cve.now/CVE-2026-112880.md): CRLF injection in Proxy-Authorization header built from proxy\_auth\_fun in hackney (CVSS 2.1, benoitc hackney · hackney)
- [CVE-2026-108529](https://cve.now/CVE-2026-108529.md): SETTINGS and stream-0 WINDOW\_UPDATE frames trigger quadratic work over blocked streams in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-110499](https://cve.now/CVE-2026-110499.md): Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-109584](https://cve.now/CVE-2026-109584.md): HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-111103](https://cve.now/CVE-2026-111103.md): HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit (CVSS 8.2, mtrudel bandit · bandit)
- [CVE-2026-111101](https://cve.now/CVE-2026-111101.md): HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-113436](https://cve.now/CVE-2026-113436.md): Quadratic bignum parsing of Content-Length and Host port values in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-110314](https://cve.now/CVE-2026-110314.md): WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit (CVSS 6.3, mtrudel bandit · bandit)
- [CVE-2026-114213](https://cve.now/CVE-2026-114213.md): WebSocket 1-byte continuation frames bypass \`max\_fragmented\_message\_size\` in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-114216](https://cve.now/CVE-2026-114216.md): Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit (CVSS 6.3, mtrudel bandit · bandit)
- [CVE-2026-115269](https://cve.now/CVE-2026-115269.md): HTTP/2 WINDOW\_UPDATE and SETTINGS frames reset the request body read timeout in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-108525](https://cve.now/CVE-2026-108525.md): HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-96581](https://cve.now/CVE-2026-96581.md): An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records (CVSS 7.6, ash-project ash · ash)
- [CVE-2026-115627](https://cve.now/CVE-2026-115627.md): AshPostgres ignores attribute multitenancy on the join resource when loading many\_to\_many and through relationships, returning records related through other tenants' rows (CVSS 6.0, ash-project ash\_postgres · ash\_postgres)
- [CVE-2026-115635](https://cve.now/CVE-2026-115635.md): AshPostgres returns another tenant's record for a skipped upsert when return\_skipped\_upsert? is set (CVSS 6.0, ash-project ash\_postgres · ash\_postgres)
- [CVE-2026-114214](https://cve.now/CVE-2026-114214.md): Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records (CVSS 6.0, ash-project ash · ash)
- [CVE-2026-107685](https://cve.now/CVE-2026-107685.md): WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers (CVSS 9.1, agentjido req\_llm · req\_llm)
- [CVE-2026-105963](https://cve.now/CVE-2026-105963.md): Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments (CVSS 5.1, elixir-plug plug · elixir-plug plug\_crypto +2)
- [EEF-CVE-2026-111497](https://cve.now/EEF-CVE-2026-111497.md): Out-of-bounds write in the Brotli decoder bundled with erl-brotli (no CVSS, brotli)
- [CVE-2026-93471](https://cve.now/CVE-2026-93471.md): Unbounded SAML message decompression in esaml allows memory exhaustion (CVSS 8.7, handnot2 esaml · arekinath esaml +2)
- [CVE-2026-86696](https://cve.now/CVE-2026-86696.md): Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion (CVSS 8.2, handnot2 esaml · arekinath esaml +2)
- [CVE-2026-105270](https://cve.now/CVE-2026-105270.md): Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion (CVSS 8.7, arekinath esaml · handnot2 esaml +2)
- [CVE-2026-105660](https://cve.now/CVE-2026-105660.md): Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit (CVSS 6.9, mtrudel bandit · bandit)
- [CVE-2026-96596](https://cve.now/CVE-2026-96596.md): erl\_tar:extract/2 loops forever on a GNU sparse member with a trailing hole (CVSS 5.9, erlang rebar3 · hexpm hex\_core +3)
- [CVE-2026-105659](https://cve.now/CVE-2026-105659.md): HTTP/2 blocked-send deadlines reset on every WINDOW\_UPDATE, letting a trickle pin stream processes indefinitely in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-105274](https://cve.now/CVE-2026-105274.md): hex\_core decompresses registry and Erlang term API responses without size limits (CVSS 2.1, hexpm hex\_core · erlang rebar3 +2)
- [CVE-2026-103502](https://cve.now/CVE-2026-103502.md): hex\_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25 (CVSS 5.9, hexpm hex\_core · hex\_core)
- [CVE-2026-105283](https://cve.now/CVE-2026-105283.md): Internal error terms inspected into AshTypescript RPC error responses (CVSS 6.3, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-97853](https://cve.now/CVE-2026-97853.md): Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS (CVSS 6.9, ericmj decimal · decimal)
- [CVE-2026-104635](https://cve.now/CVE-2026-104635.md): Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages (CVSS 8.2, elixir-protobuf protobuf · protobuf)
- [CVE-2026-101028](https://cve.now/CVE-2026-101028.md): Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts (CVSS 6.0, ash-project ash · ash)
- [CVE-2026-104634](https://cve.now/CVE-2026-104634.md): beam\_mcp: JSON boolean and null tool arguments reach dispatch as strings (CVSS 2.3, ScriptKittyOS beam\_mcp · beam\_mcp)
- [CVE-2026-88257](https://cve.now/CVE-2026-88257.md): beam\_mcp: nested tool argument constraints advertised but not enforced (CVSS 5.3, ScriptKittyOS beam\_mcp · beam\_mcp)
- [CVE-2026-94206](https://cve.now/CVE-2026-94206.md): Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds (CVSS 6.3, danielberkompas cloak\_ecto · danielberkompas cloak +2)
- [CVE-2026-95105](https://cve.now/CVE-2026-95105.md): Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping (CVSS 8.2, danielberkompas cloak · cloak)
- [CVE-2026-94201](https://cve.now/CVE-2026-94201.md): Filtering an :atom attribute with unsafe\_to\_atom? can exhaust the BEAM atom table in Ash (CVSS 8.2, ash-project ash · ash)
- [CVE-2026-94194](https://cve.now/CVE-2026-94194.md): Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries (CVSS 6.3, elixir-mint mint · mint)
- [CVE-2026-92103](https://cve.now/CVE-2026-92103.md): Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max\_frame\_size (CVSS 6.3, elixir-mint mint · mint)
- [CVE-2026-91043](https://cve.now/CVE-2026-91043.md): HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max\_header\_list\_size and exhaust client memory (CVSS 8.2, elixir-mint mint · mint)
- [CVE-2026-92106](https://cve.now/CVE-2026-92106.md): lazy\_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS (CVSS 2.3, dashbitco lazy\_html · lazy\_html)
- [CVE-2026-93477](https://cve.now/CVE-2026-93477.md): Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-91187](https://cve.now/CVE-2026-91187.md): Improper Verification of Cryptographic Signature in dashbit nimble\_zta Cloudflare strategy (CVSS 9.3, dashbit nimble\_zta · nimble\_zta)
- [CVE-2026-86698](https://cve.now/CVE-2026-86698.md): Refresh tokens accepted as private repository credentials at the CDN (CVSS 2.3, hexpm hex.pm · hexpm)
- [CVE-2026-87119](https://cve.now/CVE-2026-87119.md): mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed (CVSS 8.2, ZenHive mpp · mpp)
- [CVE-2026-89420](https://cve.now/CVE-2026-89420.md): Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free (CVSS 7.1, ZenHive mpp · mpp)
- [CVE-2026-82672](https://cve.now/CVE-2026-82672.md): Unvalidated chunk-size line tail in Mint HTTP/1 client enables response smuggling against strict intermediaries on pooled connections (CVSS 6.3, elixir-mint mint · mint)
- [CVE-2026-86688](https://cve.now/CVE-2026-86688.md): Session id is not renewed on authentication in ash\_authentication, allowing session fixation (CVSS 7.4, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-76949](https://cve.now/CVE-2026-76949.md): Remember-me sign-in guard reads a session key that is never written in ash\_authentication, allowing session replacement (CVSS 9.1, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-54451](https://cve.now/CVE-2026-54451.md): Elixir protobuf: Unbounded recursion depth in embedded-message decoding (CVSS 8.2, elixir-protobuf protobuf · protobuf)
- [CVE-2026-91039](https://cve.now/CVE-2026-91039.md): dynamic\_oidc identities are not namespaced by connection in ash\_authentication, allowing cross-connection account takeover (CVSS 9.1, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-88952](https://cve.now/CVE-2026-88952.md): OAuth2 sign-in attached to an existing account without an email comparison in AshAuthentication (CVSS 9.1, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-85500](https://cve.now/CVE-2026-85500.md): require\_confirmed\_with is not enforced on the action and fails open on an unreadable attribute in AshAuthentication (CVSS 9.1, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-86533](https://cve.now/CVE-2026-86533.md): Revoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix (CVSS 9.1, team-alembic ash\_authentication · team-alembic ash\_authe… +2)
- [CVE-2026-81632](https://cve.now/CVE-2026-81632.md): Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix (CVSS 7.2, team-alembic ash\_authentication\_phoenix · team-alembic a… +2)
- [CVE-2026-80218](https://cve.now/CVE-2026-80218.md): Sign-in token minted for one resource accepted by another in AshAuthentication (CVSS 7.6, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-78223](https://cve.now/CVE-2026-78223.md): Token revocation record built from unverified JWT claims in AshAuthentication (CVSS 6.9, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-86522](https://cve.now/CVE-2026-86522.md): Log injection via an unescaped password reset identity in AshAuthentication (CVSS 6.3, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-81637](https://cve.now/CVE-2026-81637.md): Replayable OAuth2 CSRF state retained after a failed callback in AshAuthentication (CVSS 2.3, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-82761](https://cve.now/CVE-2026-82761.md): Magic link single-use tokens replayable via TOCTOU race in AshAuthentication (CVSS 9.1, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-82685](https://cve.now/CVE-2026-82685.md): Confirmation token accepted on any record in AshAuthentication (CVSS 7.6, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-82760](https://cve.now/CVE-2026-82760.md): Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in (CVSS 8.2, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-82759](https://cve.now/CVE-2026-82759.md): Reversible IP address pseudonymisation in AshAuthentication audit log hash mode (CVSS 1.8, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-82723](https://cve.now/CVE-2026-82723.md): Actor record with password digest stored in AshAuthentication audit log entries (CVSS 1.8, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-86338](https://cve.now/CVE-2026-86338.md): Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle (CVSS 6.0, ash-project ash · ash)
- [CVE-2026-88255](https://cve.now/CVE-2026-88255.md): Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission gate twice with one signed transaction (CVSS 6.3, ZenHive mpp · mpp)
- [CVE-2026-89186](https://cve.now/CVE-2026-89186.md): Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and serve it to clients that never paid (CVSS 6.3, ZenHive mpp · mpp)
- [CVE-2026-77866](https://cve.now/CVE-2026-77866.md): SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts (CVSS 9.0, Slab safeurl · safeurl)
- [CVE-2026-77972](https://cve.now/CVE-2026-77972.md): safeurl validated address is not bound to the request, allowing DNS rebinding (CVSS 9.0, Slab safeurl · safeurl)
- [CVE-2026-78216](https://cve.now/CVE-2026-78216.md): AshLua eval read operations can read field-policy-protected fields via aggregates (CVSS 6.0, ash-project ash\_lua · ash\_lua)
- [CVE-2026-78230](https://cve.now/CVE-2026-78230.md): AshAi aggregate tool can read field-policy-protected fields (CVSS 6.0, ash-project ash\_ai · ash\_ai)
- [CVE-2026-82710](https://cve.now/CVE-2026-82710.md): Terminal escape sequence injection in mix usage\_rules.search\_docs via package documentation metadata (CVSS 2.3, ash-project usage\_rules · usage\_rules)
- [CVE-2026-82584](https://cve.now/CVE-2026-82584.md): Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata (CVSS 2.3, ash-project igniter · igniter)
- [CVE-2026-82586](https://cve.now/CVE-2026-82586.md): AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes (CVSS 8.2, ash-project ash\_lua · ash\_lua)
- [CVE-2026-81638](https://cve.now/CVE-2026-81638.md): Non-canonical ULID spellings are accepted and alias to the same record in ash\_double\_entry (CVSS 2.1, ash-project ash\_double\_entry · ash\_double\_entry)
- [CVE-2026-82758](https://cve.now/CVE-2026-82758.md): ash\_authentication\_oauth2\_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server · ash\_authenti…)
- [CVE-2026-82757](https://cve.now/CVE-2026-82757.md): ash\_authentication\_oauth2\_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server · ash\_authenti…)
- [CVE-2026-82756](https://cve.now/CVE-2026-82756.md): Improper Encoding or Escaping of Output vulnerability in ash-project ash\_authentication\_oauth2\_server allows an unauthenticated attacker to inject arbitrary authentication parameters into the… (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server · ash\_authenti…)
- [CVE-2026-82755](https://cve.now/CVE-2026-82755.md): ash\_authentication\_oauth2\_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server · ash\_authenti…)
- [CVE-2026-82754](https://cve.now/CVE-2026-82754.md): ash\_authentication\_oauth2\_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server · ash\_authenti…)
- [CVE-2026-82753](https://cve.now/CVE-2026-82753.md): Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash\_authentication\_oauth2\_server (CVSS 8.2, ash-project ash\_authentication\_oauth2\_server · ash\_authenti…)
- [CVE-2026-82750](https://cve.now/CVE-2026-82750.md): Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation (CVSS 8.3, ZenHive mpp · mpp)
- [CVE-2026-82751](https://cve.now/CVE-2026-82751.md): Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning (CVSS 8.3, ZenHive mpp · mpp)
- [CVE-2026-82752](https://cve.now/CVE-2026-82752.md): Ash string length constraints count graphemes, so a combining-mark string of any size passes max\_length (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82728](https://cve.now/CVE-2026-82728.md): Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS (CVSS 8.2, elixir-mint mint · mint)
- [CVE-2026-82729](https://cve.now/CVE-2026-82729.md): Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS (CVSS 6.3, elixir-mint mint · mint)
- [CVE-2026-82747](https://cve.now/CVE-2026-82747.md): Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82749](https://cve.now/CVE-2026-82749.md): Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82748](https://cve.now/CVE-2026-82748.md): Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82746](https://cve.now/CVE-2026-82746.md): Ash.update\_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82745](https://cve.now/CVE-2026-82745.md): ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82744](https://cve.now/CVE-2026-82744.md): Ash.Reactor change step fails open, skipping a change when its where guard raises (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82743](https://cve.now/CVE-2026-82743.md): Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82742](https://cve.now/CVE-2026-82742.md): Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82741](https://cve.now/CVE-2026-82741.md): Ash.Type.Union with :map\_with\_tag does not force the tag on dump, enabling tag confusion (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82740](https://cve.now/CVE-2026-82740.md): Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82739](https://cve.now/CVE-2026-82739.md): Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82738](https://cve.now/CVE-2026-82738.md): Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82737](https://cve.now/CVE-2026-82737.md): Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82736](https://cve.now/CVE-2026-82736.md): Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82735](https://cve.now/CVE-2026-82735.md): Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-82734](https://cve.now/CVE-2026-82734.md): Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal (CVSS 2.1, ash-project ash · ash)
- [CVE-2026-82731](https://cve.now/CVE-2026-82731.md): Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection (CVSS 2.3, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-74837](https://cve.now/CVE-2026-74837.md): Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter (CVSS 8.7, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-82733](https://cve.now/CVE-2026-82733.md): Route handler return value echoed into AshTypescript error response (CVSS 6.3, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-82732](https://cve.now/CVE-2026-82732.md): Declared argument constraints not enforced on AshTypescript typed controller routes (CVSS 6.3, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-82730](https://cve.now/CVE-2026-82730.md): Authorization-redacted field values disclosed through AshTypescript result normalization (CVSS 8.2, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-77950](https://cve.now/CVE-2026-77950.md): RPC error handler fails open in AshTypescript, disclosing unredacted errors (CVSS 6.3, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-77856](https://cve.now/CVE-2026-77856.md): Unbounded atom creation from typed struct field names in AshTypescript field selector (CVSS 8.2, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-82725](https://cve.now/CVE-2026-82725.md): AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data (CVSS 2.3, ash-project ash\_phoenix · ash\_phoenix)
- [CVE-2026-82724](https://cve.now/CVE-2026-82724.md): Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle\_subdomain (CVSS 7.6, ash-project ash\_phoenix · ash\_phoenix)
- [CVE-2026-82726](https://cve.now/CVE-2026-82726.md): AshPhoenix get\_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant (CVSS 6.3, ash-project ash\_phoenix · ash\_phoenix)
- [CVE-2026-82727](https://cve.now/CVE-2026-82727.md): AshPhoenix Form.Auto leaks submitted params in an unknown \_union\_type error message (CVSS 2.3, ash-project ash\_phoenix · ash\_phoenix)
- [CVE-2026-82673](https://cve.now/CVE-2026-82673.md): Path traversal in AshAdmin file uploads via unsanitized client filename (CVSS 8.3, ash-project ash\_admin · ash\_admin)
- [CVE-2026-81853](https://cve.now/CVE-2026-81853.md): AshAdmin composite primary key decoding accepts arbitrary fields, enabling a secret-attribute oracle (CVSS 2.3, ash-project ash\_admin · ash\_admin)
- [CVE-2026-81852](https://cve.now/CVE-2026-81852.md): AshAdmin ships a hardcoded CSP nonce, allowing nonce-based CSP bypass (CVSS 2.1, ash-project ash\_admin · ash\_admin)
- [CVE-2026-82681](https://cve.now/CVE-2026-82681.md): Query-parameter injection in AshAdmin row-action links via unencoded string primary keys (CVSS 2.0, ash-project ash\_admin · ash\_admin)
- [CVE-2026-77850](https://cve.now/CVE-2026-77850.md): Stored XSS in AshAdmin relationship typeahead via unescaped label\_field content (CVSS 8.4, ash-project ash\_admin · ash\_admin)
- [CVE-2026-82722](https://cve.now/CVE-2026-82722.md): AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS) (CVSS 8.3, ash-project ash\_admin · ash\_admin)
- [CVE-2026-75757](https://cve.now/CVE-2026-75757.md): AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain (CVSS 8.3, ash-project ash\_admin · ash\_admin)
- [CVE-2026-75760](https://cve.now/CVE-2026-75760.md): AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error (CVSS 7.1, ash-project ash\_ai · ash\_ai)
- [CVE-2026-82580](https://cve.now/CVE-2026-82580.md): AshAi echoes raw tool exception messages into the conversation, disclosing internal details (CVSS 5.3, ash-project ash\_ai · ash\_ai)
- [CVE-2026-82579](https://cve.now/CVE-2026-82579.md): AshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service (CVSS 6.0, ash-project ash\_ai · ash\_ai)
- [CVE-2026-82564](https://cve.now/CVE-2026-82564.md): Identity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records (CVSS 7.1, ash-project ash\_ai · ash\_ai)
- [CVE-2026-81315](https://cve.now/CVE-2026-81315.md): MCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header (CVSS 7.4, ash-project ash\_ai · ash\_ai)
- [CVE-2026-77956](https://cve.now/CVE-2026-77956.md): EEx template evaluation of prompt content in AshAi enables remote code execution (CVSS 8.9, ash-project ash\_ai · ash\_ai)
- [CVE-2026-78693](https://cve.now/CVE-2026-78693.md): Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names (CVSS 6.9, ash-project ash\_graphql · ash\_graphql)
- [CVE-2026-80223](https://cve.now/CVE-2026-80223.md): Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read (CVSS 7.1, ash-project ash\_graphql · ash\_graphql)
- [CVE-2026-81636](https://cve.now/CVE-2026-81636.md): Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service (CVSS 8.7, ash-project ash\_graphql · ash\_graphql)
- [CVE-2026-81633](https://cve.now/CVE-2026-81633.md): Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment (CVSS 6.9, ash-project ash\_graphql · ash\_graphql)
- [CVE-2026-81643](https://cve.now/CVE-2026-81643.md): Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification (CVSS 2.3, ash-project ash\_graphql · ash\_graphql)
- [CVE-2026-82367](https://cve.now/CVE-2026-82367.md): Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic (CVSS 2.3, ash-project ash\_graphql · ash\_graphql)
- [CVE-2026-81322](https://cve.now/CVE-2026-81322.md): Cloaked plaintext leaks through a non-sensitive action argument in AshCloak (CVSS 2.1, ash-project ash\_cloak · ash\_cloak)
- [CVE-2026-81319](https://cve.now/CVE-2026-81319.md): Unsafe deserialization of decrypted terms enables node DoS in AshCloak (CVSS 5.9, ash-project ash\_cloak · ash\_cloak)
- [CVE-2026-78699](https://cve.now/CVE-2026-78699.md): rename\_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgres (CVSS 7.2, ash-project ash\_postgres · ash\_postgres)
- [CVE-2026-77454](https://cve.now/CVE-2026-77454.md): exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql (CVSS 5.9, ash-project ash\_sql · ash\_sql)
- [CVE-2026-81316](https://cve.now/CVE-2026-81316.md): Same-named aggregates with differing filters are conflated in AshSql (CVSS 2.1, ash-project ash\_sql · ash\_sql)
- [CVE-2026-81318](https://cve.now/CVE-2026-81318.md): Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql (CVSS 2.1, ash-project ash\_sql · ash\_sql)
- [CVE-2026-78691](https://cve.now/CVE-2026-78691.md): Unescaped backslash allows LIKE wildcard injection in AshSql string search (CVSS 2.1, ash-project ash\_sql · ash\_sql)
- [CVE-2026-80227](https://cve.now/CVE-2026-80227.md): SQL string\_trim removes only spaces, diverging from in-memory trimming in AshSql (CVSS 2.1, ash-project ash\_sql · ash\_sql)
- [CVE-2026-78228](https://cve.now/CVE-2026-78228.md): Unbounded handle\_error recursion enables denial of service in AshOban triggers (CVSS 5.9, ash-project ash\_oban · ash\_oban)
- [CVE-2026-78038](https://cve.now/CVE-2026-78038.md): Job argument injection via :args overrides primary\_key and tenant in AshOban (CVSS 5.9, ash-project ash\_oban · ash\_oban)
- [CVE-2026-77846](https://cve.now/CVE-2026-77846.md): JSON path injection via unescaped get\_path segments in AshSqlite (CVSS 2.1, ash-project ash\_sqlite · ash\_sqlite)
- [CVE-2026-75759](https://cve.now/CVE-2026-75759.md): Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc (CVSS 7.6, erlef oidcc · oidcc)
- [CVE-2026-77831](https://cve.now/CVE-2026-77831.md): Algorithmic-complexity denial of service in AshPaperTrail full-diff list tracking (CVSS 2.1, ash-project ash\_paper\_trail · ash\_paper\_trail)
- [CVE-2026-77970](https://cve.now/CVE-2026-77970.md): Sensitive fields nested in embedded values are not redacted in AshPaperTrail versions (CVSS 5.9, ash-project ash\_paper\_trail · ash\_paper\_trail)
- [CVE-2026-75847](https://cve.now/CVE-2026-75847.md): Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrail (CVSS 5.9, ash-project ash\_paper\_trail · ash\_paper\_trail)
- [CVE-2026-66353](https://cve.now/CVE-2026-66353.md): Doggo vulnerable to cross-site scripting via unescaped date field values (CVSS 5.3, woylie doggo · doggo)
- [CVE-2026-65633](https://cve.now/CVE-2026-65633.md): Purpose-limited JWT accepted as full bearer authentication in AshAuthentication (CVSS 7.6, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-66882](https://cve.now/CVE-2026-66882.md): Reflected XSS in AshAuthentication confirmation and magic link interaction forms (CVSS 2.1, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-75554](https://cve.now/CVE-2026-75554.md): Explicit organization scopes survive token refresh after membership ends (CVSS 2.3, hexpm hex.pm · hexpm)
- [CVE-2026-75542](https://cve.now/CVE-2026-75542.md): OAuth token exchange grants repository scopes for organizations the principal cannot access (CVSS 8.3, hexpm hex.pm · hexpm)
- [CVE-2026-56813](https://cve.now/CVE-2026-56813.md): Cookie attribute injection in Plug.Conn.Cookies.encode/2 (CVSS 2.1, elixir-plug plug · plug)
- [CVE-2026-56814](https://cve.now/CVE-2026-56814.md): Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) (CVSS 6.9, elixir-plug plug · plug)
- [CVE-2026-56811](https://cve.now/CVE-2026-56811.md): Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service (CVSS 8.7, phoenixframework phoenix · phoenix)
- [CVE-2026-54893](https://cve.now/CVE-2026-54893.md): Email-derived URL path injection in the Swoosh Microsoft Graph adapter (CVSS 2.1, swoosh)
- [CVE-2026-48853](https://cve.now/CVE-2026-48853.md): Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc (CVSS 9.2, elixir-grpc grpc · grpc)
- [CVE-2026-48599](https://cve.now/CVE-2026-48599.md): Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding (CVSS 7.6, elixir-grpc grpc · grpc)
- [CVE-2026-48854](https://cve.now/CVE-2026-48854.md): Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc (CVSS 8.7, elixir-grpc grpc · grpc)
- [CVE-2026-43966](https://cve.now/CVE-2026-43966.md): HTTP Response Splitting via Non-VCHAR Bytes in cow\_http\_struct\_hd:escape\_string/2 (CVSS 6.3, ninenines cowlib · cowlib +2)
- [CVE-2026-48596](https://cve.now/CVE-2026-48596.md): CRLF injection in Tesla.Multipart.add\_content\_type\_param/2 allows HTTP header injection (CVSS 2.1, elixir-tesla tesla · tesla)
- [CVE-2026-48594](https://cve.now/CVE-2026-48594.md): Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression (CVSS 8.2, elixir-tesla tesla · tesla)
- [CVE-2026-48595](https://cve.now/CVE-2026-48595.md): Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects (CVSS 8.2, elixir-tesla tesla · tesla)
- [CVE-2026-48597](https://cve.now/CVE-2026-48597.md): Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint (CVSS 8.2, elixir-tesla tesla · tesla)
- [CVE-2026-48598](https://cve.now/CVE-2026-48598.md): CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection (CVSS 2.1, elixir-tesla tesla · tesla)
- [CVE-2026-43969](https://cve.now/CVE-2026-43969.md): Cookie Request Header Injection via Unvalidated Encoder in cow\_cookie:cookie/1 (CVSS 2.1, ninenines cowlib · cowlib)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/hex
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.