Priority MEDIUM 60
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4.
elixir-ecto
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
elixir-ecto records in CISA KEVNo elixir-ecto vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Postgrex · all components
TI-2026-25179 CVE-2026-32687 · GHSA-r73h-97w8-m54h
SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
Priority LOW 34
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection.