Hex Advisories.

CDATA Section Breakout via Unsanitised ]]> in xml_builder

• Other injection

>=0.0.7, <2.4.1 · fixed in 2.4.1

HTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit

• Other injection

>=1.4.0, <1.12.5 · fixed in 1.12.5

HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit

• Denial of service

>=0.3.4, <1.12.5 · fixed in 1.12.5

Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

• Authentication bypass

>=0.3.0 · no fixed version yet

Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses

• CWE-345

>=0.3.0 · no fixed version yet

On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay

• Authentication bypass

>=0.3.0, <0.6.3 · fixed in 0.6.3

Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

• Denial of service

>=0.2.0, <0.12.0 · fixed in 0.12.0

Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay

• Authentication bypass

>=0.6.1, <0.6.4 · fixed in 0.6.4

Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race

• Race condition

>=0.2.0, <0.6.1 · fixed in 0.6.1

membrane_mp4_plugin has an unauthenticated denial-of-service via BEAM atom table exhaustion

• Denial of service

<0.36.7 · fixed in 0.36.7

Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1

• CWE-116

>=2.9.0, <2.20.0 · fixed in 2.20.0

Filter expression injection via forged keyset pagination cursor in Ash

• SQL injection
• Insecure deserialization

>=1.17.0, <3.31.3 · fixed in 3.31.3

Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR

• Open redirect

>=0.5.0, <1.0.19 || >=1.1.0-rc.0, <1.1.33 || >=1.2.0-rc.0, <1.2.9 · fixed in 1.0.19, 1.1.33, 1.2.9

Predicate injection in manage_relationship belongs_to lookup discloses secret lookup keys in Ash

• Other injection

>=1.52.0-rc.11, <3.31.1 · fixed in 3.31.1

Memory exhaustion via unbounded deserialization of keyset pagination cursors in Ash.Page.Keyset

• Insecure deserialization

>=1.17.0, <3.31.1 · fixed in 3.31.1

Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

• Denial of service

>=0.1.0, <0.9.3 · fixed in 0.9.3

SQL injection via the :comment option in Postgrex.stream/4

• SQL injection

>=0.19.3, <0.22.4 · fixed in 0.22.4

Quadratic sibling re-flattening in the html_sanitize_ex traversal engine allows CPU-exhaustion denial of service

• Denial of service

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

Quadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of service

• Denial of service

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input

• Other injection

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.4 · fixed in 1.4.5, 1.5.4

html_sanitize_ex HTML5 scrubber keeps attacker-supplied meta refresh, allowing forced cross-origin redirection

• Open redirect

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking

• Open redirect

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

html_sanitize_ex HTML5 scrubber keeps attacker-supplied `<object>` elements, allowing untrusted content embedding

• CWE-829

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.3 · fixed in 1.4.5, 1.5.3

Livebook Teams identity callback lacks state binding, allowing login CSRF

• Cross-site request forgery (CSRF)

>=0.15.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

• CWE-346

>=0.5.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

Unescaped deployment environment variables in generated setup commands

• Command injection

>=0.13.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download

• Path traversal

>=0.11.0, <0.18.7 || >=0.19.0, <0.19.9 · fixed in 0.18.7, 0.19.9

Livebook Teams identity check fails open when the deployment group is unresolvable, allowing unauthenticated access

• CWE-636

>=0.19.7, <0.19.9 · fixed in 0.19.9

Oidcc.Plug.Authorize user agent session binding inert due to case-sensitive header lookup

• CWE-178

>=0.1.0-alpha.3, <0.5.0 · fixed in 0.5.0

Oidcc.Plug.AuthorizationCallback accepts callbacks with no authorize session or no state parameter, defeating CSRF protection

• Cross-site request forgery (CSRF)

>=0.2.0-beta.1, <0.5.0 · fixed in 0.5.0

Reflected XSS in oaskit's default HTML error handler

• Cross-site scripting (XSS)

>=0.1.0, <0.14.1 · fixed in 0.14.1

guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1

• Denial of service

>=2.0.0, <2.4.1 · fixed in 2.4.1

Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

• Denial of service

>=2.0.0, <2.4.1 · fixed in 2.4.1

Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

• Denial of service

>=0.1.0, <2.4.1 · fixed in 2.4.1

Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation

• Weak cryptography or TLS

>=1.0.0, <2.4.1 · fixed in 2.4.1

YAML injection via unescaped newlines in ymlr document comments

• Other injection

>=0.0.1, <5.1.6 · fixed in 5.1.6

Boruta accepts expired JWT client assertions due to missing exp claim validation

• Authentication bypass

>=2.3.0, <2.3.7 · fixed in 2.3.7

Boruta dynamic client registration allows creation of over-privileged OAuth clients

• CWE-653

>=2.3.0, <2.3.7 · fixed in 2.3.7

Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching

• Server-side request forgery (SSRF)

>=2.3.2, <2.3.7 · fixed in 2.3.7

Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

• Denial of service

>=2.0.0-pre.4, <2.18.0 · fixed in 2.18.0

Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

• Denial of service

>=2.0.0-pre.1, <2.19.0 · fixed in 2.19.0

Quadratic CPU blow-up reassembling fragmented WebSocket messages in Bandit

• Denial of service

>=1.11.0, <1.12.1 · fixed in 1.12.1

Sign-tolerant HTTP/1 chunk-size parser in Mint enables response smuggling against strict intermediaries on pooled connections

• HTTP request smuggling

>=0.1.0, <1.9.3 · fixed in 1.9.3

Protobuf: Unbounded recursion depth in embedded-message decoding

• Denial of service

>=0.8.0, <0.16.1 · fixed in 0.16.1

Missing ID token claim validation in ueberauth_apple allows account takeover

• Authentication bypass

>=0.1.0, <0.6.2 · fixed in 0.6.2

Zero-length HTTP/2 CONTINUATION frames bypass Mint's header-block byte-size cap and exhaust client memory

• Denial of service

>=0.1.0, <1.9.2 · fixed in 1.9.2

Unbounded HTTP/1 response-header and chunked-trailer accumulation in Mint causes memory-exhaustion DoS

• Denial of service

>=0.1.0, <1.9.2 · fixed in 1.9.2

Scheme validation bypass in Phoenix.LiveView.Utils leads to XSS via <.link>

• Cross-site scripting (XSS)

>=1.2.2, <1.2.7 · fixed in 1.2.7

Cookie attribute injection in Plug.Conn.Cookies.encode/2

• CWE-141

>=0.1.0, <1.16.6 || >=1.17.0, <1.17.4 || >=1.18.0, <1.18.5 || >=1.19.1, <1.19.5 || >=1.20.0, <1.20.3 · fixed in 1.16.6, 1.17.4, 1.18.5, 1.19.5, 1.20.3

Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

• Denial of service

>=1.4.0-rc.0, <1.16.6 || >=1.17.0, <1.17.4 || >=1.18.0, <1.18.5 || >=1.19.1, <1.19.5 || >=1.20.0, <1.20.3 · fixed in 1.16.6, 1.17.4, 1.18.5, 1.19.5, 1.20.3

SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service

• SQL injection

>=0.16.0, <0.22.3 · fixed in 0.22.3

Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff

• CWE-754

>=1.2.0-rc.0, <1.5.15 || >=1.6.0-rc.0, <1.6.17 || >=1.7.0-rc.0, <1.7.24 || >=1.8.0-rc.0, <1.8.9 · fixed in 1.5.15, 1.6.17, 1.7.24, 1.8.9

Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service

• Denial of service

>=0.11.0, <1.5.15 || >=1.6.0-rc.0, <1.6.17 || >=1.7.0-rc.0, <1.7.24 || >=1.8.0-rc.0, <1.8.9 · fixed in 1.5.15, 1.6.17, 1.7.24, 1.8.9

mint buffers an entire chunked response chunk in memory in Mint.HTTP1.decode_body/5

• Denial of service

>=0.5.0, <1.9.1 · fixed in 1.9.1

Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax

• Denial of service

>=0.1.1, <1.0.4 · fixed in 1.0.4

QUIC has Broken TLS verification

• Weak cryptography or TLS

<1.4.4 · fixed in 1.4.4

RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API

• Denial of service

>=3.11.0, <3.11.24 || >=3.12.0, <3.12.7 · fixed in 3.11.24, 3.12.7

RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins

• Weak cryptography or TLS
• CWE-335

>=3.8.0, <3.8.32 || >=3.9.0, <3.9.18 || >=3.10.0, <3.10.2 · fixed in 3.8.32, 3.9.18, 3.10.2

Atom-table exhaustion denial-of-service via JSON parse_document in MDEx

• Denial of service

>=0.4.3, <0.13.2 · fixed in 0.13.2

Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

• Cross-site scripting (XSS)

>=0.8.3, <0.13.2 · fixed in 0.13.2