Post

💥 Elixir PSA: update Plug *immediately* to the latest possible (1.20.1) The latest CVE makes it trivially easy to DOS a plug based server. cna.erlef.org/cves/CVE-202... This one is a doozy stay safe out there and keep your deps updated! #elixir-lang

cna.erlef.orgPlug: quadratic-time decoding of nested query/body parameters enables denial of serviceThis project handles the CVE Numbering Authority (CNA) for the Erlang Ecosystem Foundation (EEF).

tuxified.bsky.social

@tuxified.bsky.social

25 June

My first thought when reading this was: @peterullrich.com is being busy again 😅 Thanks for sharing 💜

Peter is livid that someone found a CVE that he didn't. 😏

25/6/26, 9:55 pm1 repost4 likes

Peter Ullrich

@peterullrich.com

26 June

oh no not at all! The safety of the ecosystem can't rely only on me finding vulnerabilities. I very much appreciate anyone who helps out and reports vulnerabilities to the EEF ❤️

{:ok, Noah}

@nezteb.net

26 June

I'm just teasing. You're a valuable member of this community and I love your work. But I'm gonna tease the heck out of you for missing this CRITICAL CVE! 🙂