Browse all 5 CVE security advisories affecting elixir-lang. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-97209 | Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build — elixir CWE-377 | 5.4 | Medium | 2026-10-30 |
| CVE-2026-115274 | Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir — elixir CWE-1284 | 6.9 | Medium | 2026-10-30 |
| CVE-2026-109821 | Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir — elixir CWE-1284 | 6.3 | Medium | 2026-10-30 |
| CVE-2026-75758 | Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir — elixir CWE-674 | 5.9 | Medium | 2026-08-28 |
| CVE-2026-49762 | Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service — elixir CWE-400 | 5.1 | Medium | 2026-06-09 |
This page lists every published CVE security advisory associated with elixir-lang. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.