All 5 CVE vulnerabilities found in elixir, with AI-generated Chinese analysis, references, and POCs.
Vendor: elixir-lang
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-97209 | Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build CWE-377 | 5.4 | Medium | 2026-10-30 |
| CVE-2026-115274 | Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir CWE-1284 | 6.9 | Medium | 2026-10-30 |
| CVE-2026-109821 | Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir CWE-1284 | 6.3 | Medium | 2026-10-30 |
| CVE-2026-75758 | Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir CWE-674 | 5.9 | Medium | 2026-08-28 |
| CVE-2026-49762 | Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service CWE-400 | 5.1 | Medium | 2026-06-09 |
All 5 known CVE vulnerabilities affecting elixir with full Chinese analysis, references, and POCs where available.