elixir-plug

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

elixir-plug records in CISA KEV

No elixir-plug vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Plug.cowboy 1 record MEDIUM

Records

1 record in Plug.cowboy · all components

TI-2026-25180 CVE-2026-32688 · GHSA-q8x4-x7mp-5vg2

Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy

MEDIUM 44

Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00545 Published 2026-04-27 Fixed in 2.8.1 CWE-770

Open these records in search →

Critical	0
High	3
Medium	2
Low	1
No CVSS	0