Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: elixir-lang elixir 1.18.6, 1.19.7, 1.20.5 Clear all filters
TI-2026-82969 CVE-2026-115274

Elixir JSON.decode lets huge integers exhaust CPU and memory

Priority HIGH 70

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and m…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00498 Published 2026-10-30 Fixed in 1.18.6, 1.19.7 +1 CWE-1284
TI-2026-82968 CVE-2026-109821

Unbounded port parsing in Elixir URI.parse/1 enables CPU exhaustion

Priority MEDIUM 61

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00496 Published 2026-10-30 Fixed in 1.18.6, 1.19.7 +1 CWE-1284