Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

plug — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in plug, with AI-generated Chinese analysis, references, and POCs.

Vendor: elixir-plug

CVE ID Title CVSS Severity Published
CVE-2026-56813 Cookie attribute injection in Plug.Conn.Cookies.encode/2 CWE-141 - - 2026-07-10
CVE-2026-56814 Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) CWE-770 - - 2026-07-10
CVE-2026-54892 Plug: quadratic-time decoding of nested query/body parameters enables denial of service CWE-407 - - 2026-06-23
CVE-2026-8468 Unbounded buffer accumulation in multipart header parsing causes denial of service in plug CWE-770 - - 2026-05-14

All 4 known CVE vulnerabilities affecting plug with full Chinese analysis, references, and POCs where available.