ecto
3.14.3
A toolkit for data mapping and language integrated query for Elixir
Current section
2 Advisories
Jump to
Current section
2 Advisories
Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-118391.html
- https://ecto.hexdocs.pm/Ecto.Query.API.html#json_extract_path/2
- https://ecto.hexdocs.pm/Ecto.Query.API.html#splice/1
- https://github.com/elixir-ecto/ecto/commit/cb2f03964dac324a9771f84f5088e395326e6de8
- https://github.com/elixir-ecto/ecto/commit/d0e97d8a6e274c81c25fbf08087da8d8b9bae0ea
- https://github.com/elixir-ecto/ecto/commit/eb03f45b999e2bf67ffae92811233eb6e56dba55
- https://github.com/elixir-ecto/ecto/commit/eef014ad090d27d1a5b69c0e32a50eabd44ab3bb
- https://github.com/elixir-ecto/ecto/issues/1031
- https://github.com/elixir-ecto/ecto/issues/4470
- https://github.com/elixir-ecto/ecto/security/advisories/GHSA-cxjx-vmm2-qr8r
- https://hex.pm/packages/ecto
Ecto missing `is_nil` requirement
Affected Versions
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
235 292
yesterday
107 373
last 7 days
640 088
all time
151 417 405