There is a vulnerability in Paginator (Elixir/Hex package) which makes it susceptible to Remote Code Execution (RCE) attacks via input parameters to the paginate() function.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.03311·Published 2020-09-01·Fixed in 1.0.0CWE-94