{"items":[{"id":"CVE-2026-105963","published":"2026-10-23T09:56:58.885Z","updated":"2026-10-23T13:39:29.887Z","title":"Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments","severity":"MEDIUM","score":5.1,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.00509,"kevAdded":null},{"id":"CVE-2026-56813","published":"2026-07-10T12:51:08.758Z","updated":"2026-09-24T21:30:13.749Z","title":"Cookie attribute injection in Plug.Conn.Cookies.encode/2","severity":"LOW","score":2.1,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.00216,"kevAdded":null},{"id":"CVE-2026-56814","published":"2026-07-10T11:14:35.574Z","updated":"2026-09-24T21:31:15.419Z","title":"Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)","severity":"MEDIUM","score":6.9,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.0108,"kevAdded":null},{"id":"CVE-2026-54892","published":"2026-06-23T12:31:12.629Z","updated":"2026-06-23T18:21:14.232Z","title":"Plug: quadratic-time decoding of nested query/body parameters enables denial of service","severity":"HIGH","score":8.7,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.00894,"kevAdded":null},{"id":"CVE-2026-8468","published":"2026-05-14T10:29:51.062Z","updated":"2026-05-27T15:41:29.241Z","title":"Unbounded buffer accumulation in multipart header parsing causes denial of service in plug","severity":"HIGH","score":8.2,"vendor":"elixir-plug","product":"plug","kev":false,"epss":0.0062,"kevAdded":null},{"id":"CVE-2026-32688","published":"2026-04-27T13:45:35.160Z","updated":"2026-04-29T17:08:07.227Z","title":"Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy","severity":"HIGH","score":8.7,"vendor":"elixir-plug","product":"plug_cowboy","kev":false,"epss":0.00545,"kevAdded":null}]}