{"items":[{"id":"CVE-2026-97209","published":"2026-10-30T08:59:17.615Z","updated":"2026-10-30T16:50:46.465Z","title":"Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build","severity":"MEDIUM","score":5.4,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00115,"kevAdded":null,"exploit":true},{"id":"CVE-2026-115274","published":"2026-10-30T08:57:16.847Z","updated":"2026-10-30T16:51:45.396Z","title":"Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir","severity":"MEDIUM","score":6.9,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00498,"kevAdded":null,"exploit":true},{"id":"CVE-2026-109821","published":"2026-10-30T08:54:07.752Z","updated":"2026-10-30T16:52:43.052Z","title":"Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir","severity":"MEDIUM","score":6.3,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00496,"kevAdded":null,"exploit":true},{"id":"CVE-2026-75758","published":"2026-08-28T11:28:53.505Z","updated":"2026-08-28T18:29:23.745Z","title":"Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir","severity":"MEDIUM","score":5.9,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.0018,"kevAdded":null,"exploit":true},{"id":"CVE-2026-49762","published":"2026-06-09T14:04:07.405Z","updated":"2026-10-06T08:35:59.691Z","title":"Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service","severity":"MEDIUM","score":5.1,"vendor":"elixir-lang","product":"elixir","kev":false,"epss":0.00152,"kevAdded":null,"exploit":false}]}