Hex Advisories.

Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer

• CWE-409

>=1.0.5, <1.2.5 · fixed in 1.2.5

Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

• Denial of service

>=3.4.0, <3.14.3 · fixed in 3.14.3

AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change

• CWE-1466

>=4.5.0, <4.15.1 || >=5.0.0-rc.0, <5.0.0-rc.16 · fixed in 4.15.1, 5.0.0-rc.16

AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

• Authentication bypass

>=5.0.0-rc.4, <5.0.0-rc.16 · fixed in 5.0.0-rc.16

AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account

• Broken access control

>=5.0.0-rc.0, <5.0.0-rc.16 · fixed in 5.0.0-rc.16

jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

• CWE-754

>=0.1.0, <0.26.2 · fixed in 0.26.2

Unverified Sign in with Apple callback parameter can override verified ID token claims

• Authentication bypass
• CWE-349

>=0.1.25, <0.3.2 · fixed in 0.3.2

Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1

• Cross-site scripting (XSS)

>=1.0.0, <3.3.5 || >=4.0.0, <4.4.0 · fixed in 3.3.5, 4.4.0

ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

• Weak cryptography or TLS

>=1.0.1, <1.1.8 · fixed in 1.1.8

HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

• Denial of service

>=0.3.1, <1.14.1 · fixed in 1.14.1

Host filesystem path disclosure via DNS rebinding

• Information disclosure

>=0.8.0, <0.9.2 · fixed in 0.9.2

Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

• CWE-208

>=1.10.0, <1.11.13 · fixed in 1.11.13

ECDSA signature length is not validated in jose, allowing signature malleability

• Weak cryptography or TLS

>=1.0.0, <1.11.13 · fixed in 1.11.13

erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service

• Denial of service

>=1.7.7, <1.11.13 · fixed in 1.11.13

Weak PBKDF2 parameters for password-encrypted private-key export in jose

• Weak cryptography or TLS

>=1.10.0, <1.11.13 · fixed in 1.11.13

Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types

• Denial of service

>=1.5.0, <1.11.13 · fixed in 1.11.13

Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2

• CWE-409

>=1.0.0, <1.11.13 · fixed in 1.11.13

Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

• Information disclosure

>=1.3.0, <1.11.13 · fixed in 1.11.13

Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

• CWE-354

>=1.2.0, <1.11.13 · fixed in 1.11.13

Unbounded response body buffering and decompression in hackney

• Denial of service
• CWE-409

>=2.0.0-beta.1, <4.9.0 · fixed in 4.9.0

Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

• Weak cryptography or TLS

>=1.24.0, <4.9.0 · fixed in 4.9.0

HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney

• Hard-coded credentials

>=2.0.0, <4.9.0 · fixed in 4.9.0

SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney

• Server-side request forgery (SSRF)
• CWE-436

>=4.0.1, <4.9.0 · fixed in 4.9.0

CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney

• Other injection

>=2.0.0, <4.9.0 · fixed in 4.9.0

SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit

• Denial of service

>=0.3.4, <1.14.0 · fixed in 1.14.0

Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit

• Denial of service

>=0.3.6, <1.14.0 · fixed in 1.14.0

HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit

• CWE-409

>=0.3.3, <1.14.0 · fixed in 1.14.0

HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit

• CWE-460

>=1.9.0, <1.14.0 · fixed in 1.14.0

HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit

• Denial of service

>=0.1.0, <1.14.0 · fixed in 1.14.0

Quadratic bignum parsing of Content-Length and Host port values in Bandit

• Denial of service

>=1.0.0-pre.7, <1.14.0 · fixed in 1.14.0

WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit

• CWE-602

>=0.5.1, <1.14.0 · fixed in 1.14.0

WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit

• Denial of service

>=1.11.0, <1.14.0 · fixed in 1.14.0

Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit

• HTTP request smuggling

>=1.12.4, <1.14.0 · fixed in 1.14.0

HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit

• Denial of service

>=1.4.0, <1.14.0 · fixed in 1.14.0

HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit

• Denial of service

>=0.3.1, <1.14.0 · fixed in 1.14.0

An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records

• Broken access control

>=1.22.0, <3.37.2 · fixed in 3.37.2

AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

• Broken access control

>=0.38.0, <2.15.2 · fixed in 2.15.2

AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

• Broken access control

>=2.6.22, <2.15.2 · fixed in 2.15.2

Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records

• Broken access control

>=3.24.0, <3.37.1 · fixed in 3.37.1

WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers

• Weak cryptography or TLS

>=1.9.0, <1.29.0 · fixed in 1.29.0

Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

• Information disclosure

>=1.6.3, <1.7.0 · fixed in 1.7.0

Out-of-bounds write in the Brotli decoder bundled with erl-brotli

• Memory corruption

>=0.3.0, <0.3.4 · fixed in 0.3.4

Unbounded SAML message decompression in esaml allows memory exhaustion

• CWE-409

>=0.1.0 · no fixed version yet

Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion

• Denial of service

>=0.1.0 · no fixed version yet

Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion

• Denial of service

>=0.1.0 · no fixed version yet

swoosh has email-derived URL path injection in Microsoft Graph endpoint

• Denial of service
• CWE-116

>=1.12.0, <1.26.3 · fixed in 1.26.3

Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

• CWE-1286

>=0.6.0, <1.13.0 · fixed in 1.13.0

erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

• Denial of service

>=0.14.0, <0.20.1 · fixed in 0.20.1

HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit

• Denial of service

>=1.4.0, <1.13.0 · fixed in 1.13.0

hex_core decompresses registry and Erlang term API responses without size limits

• CWE-409

>=0.1.0, <0.20.0 · fixed in 0.20.0

hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25

• Weak cryptography or TLS
• CWE-636

>=0.1.0, <0.20.0 · fixed in 0.20.0

Internal error terms inspected into AshTypescript RPC error responses

• Information disclosure

>=0.1.0, <0.19.1 · fixed in 0.19.1

Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS

• Denial of service

>=0.1.0, <3.1.2 · fixed in 3.1.2

Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

• Denial of service

>=0.8.0, <0.17.1 · fixed in 0.17.1

Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts

• Broken access control

>=2.6.0, <3.34.6 · fixed in 3.34.6

beam_mcp: JSON boolean and null tool arguments reach dispatch as strings

• CWE-704

>=0.1.0, <0.10.1 · fixed in 0.10.1

beam_mcp: nested tool argument constraints advertised but not enforced

• CWE-20

>=0.1.0, <0.10.1 · fixed in 0.10.1

Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds

• Weak cryptography or TLS

>=0.7.0, <1.0.0-alpha.0 · fixed in 1.0.0-alpha.0

Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping

• CWE-649

>=0.1.0-pre · no fixed version yet

Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash

• Denial of service

>=3.5.1, <3.34.3 · fixed in 3.34.3