PL
Product
plug
by elixir-plug · last CVE Oct 23, 2026
4
CVEs
0
On KEV
8.7
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 1
Watch

Add plug to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54892
8.7
1%
Jun 23
Plug: quadratic-time decoding of nested query/body parameters enables denial of service
Affected: 1.15.0 before 1.15.5; 1.16.0 before 1.16.4; 1.17.0 before 1.17.2; 1.18.0 before 1.18.3; 1.19.0 before 1.19.3; 712b875d3442c765d8d37e546ffd5ad9f8afcc55
Showing 1