What’s Vulnerable › Products

elixir-ecto postgrex vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your elixir-ecto postgrex version is affected

Latest elixir-ecto postgrex vulnerabilities

• CVE-2026-66838 — SQL injection via the :comment option in Postgrex.stream/4 (CVSS 8.2)
• CVE-2026-58225 — SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service (CVSS 2.1)
• CVE-2026-32687 — SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3 (CVSS 7.8)