Priority MEDIUM 60
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4.
elixir-ecto
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
elixir-ecto records in CISA KEVNo elixir-ecto vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2026-85063 CVE-2026-118391
Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto
Priority MEDIUM 45
Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with di…
TI-2026-41928 CVE-2026-58225
SQL injection in elixir-ecto postgrex
Priority MEDIUM 44
SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection.
TI-2026-25179 CVE-2026-32687 · GHSA-r73h-97w8-m54h
SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
Priority LOW 34
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection.