postgrex
Hex3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting postgrexpage 1 of 1
- CVE-2026-32687HIGHCVSS 7.8EG 7.8fixed in 0.22.22026-05-12
vulnerable: 0.16.0 ... 0.22.1 (22 versions)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Noti…
- CVE-2026-58225LOWCVSS 2.1EG 2.1fixed in 0.22.32026-07-10
vulnerable: 0.16.0 ... 0.22.2 (23 versions)
SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a denial of service of the notification connection. Postgrex.Notificatio…
- CVE-2026-66838HIGHCVSS 8.2EG 8.2fixed in 0.22.42026-08-07
vulnerable: 0.19.3 ... 0.22.3 (8 versions)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can clos…
Check whether postgrex is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for postgrex CVEs against the assets you own.
Book a Demo →