postgrex vulnerabilities

2 known vulnerabilities in postgrex from Elixir-ecto. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  postgrex: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-66838Aug 7, 2026Elixir-ecto

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimit

• 7.8 High severity

  postgrex: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-32687May 12, 2026Elixir-ecto

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Notifications':listen/3 an