Current section
1 Advisory
Jump to
Current section
1 Advisory
Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments
Affected Versions
References
- https://cna.erlef.org/cves/CVE-2026-105963.html
- https://github.com/elixir-plug/plug/commit/56000c33d8a0a2fbac491f8be06b9c5112bc2276
- https://github.com/elixir-plug/plug/commit/aeaa90e76b73ea90c3ecca9aae16fce71bd2a8d4
- https://github.com/elixir-plug/plug/security/advisories/GHSA-ffw9-w85g-f2vh
- https://github.com/elixir-plug/plug_crypto/commit/2d078b7b8264c565f0ff71235c515f4f46882dcf
- https://github.com/elixir-plug/plug_crypto/commit/981887493dada0fce7003c61861c00dfbb0fc8c5
- https://hex.pm/packages/plug
- https://hex.pm/packages/plug_crypto
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
24 859
yesterday
126 180
last 7 days
770 768
all time
159 831 283
