elixir-ecto ecto vulnerabilities

Latest elixir-ecto ecto CVEs

Newest publication first

1. CVE-2026-118391 Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

   Published 2026-11-04

   High·CVSS 8.9

   Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote attacker to exhaust memory in the application and in the database server by sending requests with distinct JSON keys or list lengths where the application inter...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.