elixir-ecto/ecto vulnerabilities

CVEs whose affected-version data names the elixir-ecto/ecto package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-118391High· 8.9

3d ago

Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys …

▾ Twilightelixir-ecto · ectoEPSS 0.49%via CVEORG