Packages

cloak_ecto

1.3.0

1.3.0 1.2.0 1.1.1 1.1.0 1.0.2 1.0.1 1.0.0 1.0.0-alpha.0

Encrypted fields for Ecto

Security advisory: This version has known vulnerabilities. View advisories

HexDocs Report package

Current section

1 Advisory

Jump to

Documentation 8 Versions 2 Dependencies 17 Dependants 1 Advisory Files Activity

EEF-CVE-2026-94206 CVE-2026-94206

Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds

October 06, 2026

CVSS

6.3 / 10.0 Medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Versions

>= 1.0.0-alpha.0

References

https://cna.erlef.org/cves/CVE-2026-94206.html
https://github.com/danielberkompas/cloak/commit/681c9702b7cd9afe0e5a840751ab009f550c69a9
https://github.com/danielberkompas/cloak/commit/8699e6417a162c39d9f0ef63511bd23d3f38d1d2
https://github.com/danielberkompas/cloak_ecto/commit/a8fa1642b02f1c445a1ee8794c9095eb0921f8f3
https://hex.pm/packages/cloak
https://hex.pm/packages/cloak_ecto

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

2 900 060

yesterday

4 272

last 7 days

84 580

all time

6 910 261

Last Updated

Apr 06, 2024

License

MIT

Build Tools

mix

Publisher

danielberkompas

Owners

danielberkompas

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

cloak_ecto

Checksum

Dependency Config

Package Details

Links

Owners

Search filters