What’s Vulnerable › Products

elixir-lang elixir vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your elixir-lang elixir version is affected

Latest elixir-lang elixir vulnerabilities

• CVE-2026-97209 — Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency build (CVSS 5.4)
• CVE-2026-115274 — Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixir (CVSS 6.9)
• CVE-2026-109821 — Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixir (CVSS 6.3)
• CVE-2026-75758 — Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir (CVSS 5.9)
• CVE-2026-49762 — Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service (CVSS 5.1)