agentprime Advisories: Hex

Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer

Thu, 05 Nov 2026 20:15:56 GMT

ezstd >=1.0.5, <1.2.5, fixed in 1.2.5. CVSS 6.9 (Medium). Published by OSV. Not analysed by agentprime yet.

Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto

Wed, 04 Nov 2026 13:57:29 GMT

ecto >=3.4.0, <3.14.3, fixed in 3.14.3. CVSS 8.9 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change

Tue, 03 Nov 2026 19:19:26 GMT

ash_authentication >=4.5.0, <4.15.1 || >=5.0.0-rc.0, <5.0.0-rc.16, fixed in 4.15.1, 5.0.0-rc.16. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

Tue, 03 Nov 2026 15:47:36 GMT

ash_authentication >=5.0.0-rc.4, <5.0.0-rc.16, fixed in 5.0.0-rc.16. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account

Tue, 03 Nov 2026 15:46:32 GMT

ash_authentication >=5.0.0-rc.0, <5.0.0-rc.16, fixed in 5.0.0-rc.16. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not

Sun, 01 Nov 2026 13:29:36 GMT

jsv >=0.1.0, <0.26.2, fixed in 0.26.2. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Unverified Sign in with Apple callback parameter can override verified ID token claims

Fri, 30 Oct 2026 23:55:23 GMT

assent >=0.1.25, <0.3.2, fixed in 0.3.2. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1

Fri, 30 Oct 2026 20:25:06 GMT

phoenix_html >=1.0.0, <3.3.5 || >=4.0.0, <4.4.0, fixed in 3.3.5, 4.4.0. CVSS 5.3 (Medium). Published by OSV. Not analysed by agentprime yet.

ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary

Fri, 30 Oct 2026 20:22:16 GMT

ssl_verify_fun >=1.0.1, <1.1.8, fixed in 1.1.8. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit

Wed, 28 Oct 2026 13:26:25 GMT

bandit >=0.3.1, <1.14.1, fixed in 1.14.1. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Host filesystem path disclosure via DNS rebinding

Tue, 27 Oct 2026 15:47:36 GMT

tidewave >=0.8.0, <0.9.2, fixed in 0.9.2. CVSS 2.3 (Low). Published by OSV. Not analysed by agentprime yet.

Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose

Mon, 26 Oct 2026 19:54:07 GMT

jose >=1.10.0, <1.11.13, fixed in 1.11.13. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ECDSA signature length is not validated in jose, allowing signature malleability

Mon, 26 Oct 2026 19:53:56 GMT

jose >=1.0.0, <1.11.13, fixed in 1.11.13. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service

Mon, 26 Oct 2026 19:53:45 GMT

jose >=1.7.7, <1.11.13, fixed in 1.11.13. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Weak PBKDF2 parameters for password-encrypted private-key export in jose

Mon, 26 Oct 2026 19:53:35 GMT

jose >=1.10.0, <1.11.13, fixed in 1.11.13. CVSS 7.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types

Mon, 26 Oct 2026 19:53:27 GMT

jose >=1.5.0, <1.11.13, fixed in 1.11.13. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2

Mon, 26 Oct 2026 19:53:16 GMT

jose >=1.0.0, <1.11.13, fixed in 1.11.13. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose

Mon, 26 Oct 2026 19:53:05 GMT

jose >=1.3.0, <1.11.13, fixed in 1.11.13. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose

Mon, 26 Oct 2026 19:52:54 GMT

jose >=1.2.0, <1.11.13, fixed in 1.11.13. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Unbounded response body buffering and decompression in hackney

Mon, 26 Oct 2026 13:49:40 GMT

hackney >=2.0.0-beta.1, <4.9.0, fixed in 4.9.0. CVSS 8.2 (High). Published by OSV. Not analysed by agentprime yet.

Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

Mon, 26 Oct 2026 13:49:29 GMT

hackney >=1.24.0, <4.9.0, fixed in 4.9.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by OSV. Not analysed by agentprime yet.

HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney

Mon, 26 Oct 2026 13:49:17 GMT

hackney >=2.0.0, <4.9.0, fixed in 4.9.0. CVSS 6.0 (Medium). Published by OSV. Not analysed by agentprime yet.

SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney

Mon, 26 Oct 2026 13:49:02 GMT

hackney >=4.0.1, <4.9.0, fixed in 4.9.0. CVSS 6.9 (Medium). Published by OSV. Not analysed by agentprime yet.

CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney

Mon, 26 Oct 2026 13:48:46 GMT

hackney >=2.0.0, <4.9.0, fixed in 4.9.0. CVSS 2.1 (Low). Published by OSV. Not analysed by agentprime yet.

SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit

Mon, 26 Oct 2026 13:35:26 GMT

bandit >=0.3.4, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit

Mon, 26 Oct 2026 13:32:38 GMT

bandit >=0.3.6, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit

Mon, 26 Oct 2026 13:32:22 GMT

bandit >=0.3.3, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit

Mon, 26 Oct 2026 13:32:06 GMT

bandit >=1.9.0, <1.14.0, fixed in 1.14.0. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit

Mon, 26 Oct 2026 13:31:48 GMT

bandit >=0.1.0, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Quadratic bignum parsing of Content-Length and Host port values in Bandit

Mon, 26 Oct 2026 13:31:35 GMT

bandit >=1.0.0-pre.7, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit

Mon, 26 Oct 2026 13:31:18 GMT

bandit >=0.5.1, <1.14.0, fixed in 1.14.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit

Mon, 26 Oct 2026 13:30:58 GMT

bandit >=1.11.0, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit

Mon, 26 Oct 2026 13:30:41 GMT

bandit >=1.12.4, <1.14.0, fixed in 1.14.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit

Mon, 26 Oct 2026 13:30:24 GMT

bandit >=1.4.0, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit

Mon, 26 Oct 2026 13:29:42 GMT

bandit >=0.3.1, <1.14.0, fixed in 1.14.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records

Mon, 26 Oct 2026 07:20:07 GMT

ash >=1.22.0, <3.37.2, fixed in 3.37.2. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

Sun, 25 Oct 2026 19:49:50 GMT

ash_postgres >=0.38.0, <2.15.2, fixed in 2.15.2. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

Sun, 25 Oct 2026 19:48:43 GMT

ash_postgres >=2.6.22, <2.15.2, fixed in 2.15.2. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records

Sun, 25 Oct 2026 19:47:30 GMT

ash >=3.24.0, <3.37.1, fixed in 3.37.1. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers

Fri, 23 Oct 2026 11:00:38 GMT

req_llm >=1.9.0, <1.29.0, fixed in 1.29.0. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Fri, 23 Oct 2026 09:56:58 GMT

plug >=1.6.3, <1.7.0, fixed in 1.7.0. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Out-of-bounds write in the Brotli decoder bundled with erl-brotli

Thu, 22 Oct 2026 13:35:41 GMT

brotli >=0.3.0, <0.3.4, fixed in 0.3.4. Published by OSV. Not analysed by agentprime yet.

Unbounded SAML message decompression in esaml allows memory exhaustion

Thu, 22 Oct 2026 06:59:24 GMT

esaml >=0.1.0, no fixed version yet. CVSS 8.7 (High). Published by OSV. Not analysed by agentprime yet.

Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion

Thu, 22 Oct 2026 06:59:07 GMT

esaml >=0.1.0, no fixed version yet. CVSS 8.2 (High). Published by OSV. Not analysed by agentprime yet.

Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion

Thu, 22 Oct 2026 06:58:43 GMT

esaml >=0.1.0, no fixed version yet. CVSS 8.7 (High). Published by OSV. Not analysed by agentprime yet.

swoosh has email-derived URL path injection in Microsoft Graph endpoint

Fri, 16 Oct 2026 19:22:31 GMT

swoosh >=1.12.0, <1.26.3, fixed in 1.26.3. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit

Thu, 15 Oct 2026 18:37:02 GMT

bandit >=0.6.0, <1.13.0, fixed in 1.13.0. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Wed, 14 Oct 2026 16:56:18 GMT

hex_core >=0.14.0, <0.20.1, fixed in 0.20.1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit

Wed, 14 Oct 2026 16:54:46 GMT

bandit >=1.4.0, <1.13.0, fixed in 1.13.0. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

hex_core decompresses registry and Erlang term API responses without size limits

Mon, 12 Oct 2026 16:43:58 GMT

hex_core >=0.1.0, <0.20.0, fixed in 0.20.0. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.