Current section

1 Advisory

Jump to
EEF-CVE-2026-32687 CVE-2026-32687 GHSA-r73h-97w8-m54h

SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3

May 12, 2026
CVSS
?
7.5 / 10.0 High
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.16.0 and < 0.22.2

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 20K 40K 60K 80K

this version

14 809

yesterday

50 292

last 7 days

259 171

all time

134 845 121

Last Updated

May 12, 2026

License

Apache-2.0

Build Tools

mix

Publisher

josevalim josevalim