`plug`

Ecosystem:
hex

Package URL:
pkg:hex/plug

Total PRs:
157 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
85 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service

GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 22 days ago • updated 3 days ago

### Summary An Allocation of Resources Without Limits or Throttling vulnerability in `Plug.Conn.read_part_headers/2` allows an unauthenticated att...

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

EEF-CVE-2026-8468 GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 28 days ago • updated 12 minutes ago

## Summary Allocation of Resources Without Limits or Throttling vulnerability in plug\_project plug allows denial of service via unbounded buffer ...

Recent PRs

RSS Feed

chore(deps): bump plug from 1.17.0 to 1.18.0

mrdotb/disco-log #84

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

frerich/auto_updater #3

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

chore(deps): bump the prod group across 1 directory with 3 updates

beam-community/bamboo #712

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.17.0 to 1.18.0

primait/telepoison #211

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

chore(deps): bump plug from 1.17.0 to 1.18.0 in the prod group

opallabs/jsonapi #9

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.17.0 to 1.18.0

primait/auth0_ex #276

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

chore(deps): bump plug from 1.17.0 to 1.18.0 in the prod group

beam-community/scrivener_headers #34

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

build(deps): bump plug from 1.17.0 to 1.18.0

jpcaruana/last_crusader #296

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0 in the prod group

beam-community/jsonapi #369

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.17.0 to 1.18.0

podium/uinta #98

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.17.0 to 1.18.0

martide/trailing_slash_plug #55

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

build(deps): bump plug from 1.17.0 to 1.18.0

Byzanteam/jet-plugin-sdk #129

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.17.0 to 1.18.0

dwyl/ping #40

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

deps(elixir): Bump plug from 1.17.0 to 1.18.0 in /elixir

KineticCafe/app_identity #224

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

build(deps): bump plug from 1.17.0 to 1.18.0 in /elixir

firezone/firezone #9340

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.14.2 to 1.18.0

primait/cloudflare_access_ex #55

1.14.2 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump the production-dependencies group with 2 updates

ash-project/ash_ai #44

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

chore(deps): Bump the production-dependencies group with 3 updates

team-alembic/ash_authentication #1012

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

chore(deps): bump plug from 1.16.1 to 1.18.0

honeybadger-io/honeybadger-elixir #621

1.16.1 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

johantell/metatags #174

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0

WTTJ/chargebeex #166

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

pxp9/lazy_doc #41

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.17.0 to 1.18.0

primait/teleplug #177

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.17.0 to 1.18.0

orbit-apps/elixir-shopifyapi #609

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 3 updates

ash-project/ash #2071

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

chore(deps): bump plug from 1.16.1 to 1.18.0

augustwenty/tenex #21

1.16.1 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.17.0 to 1.18.0

mmilk23/image_unmirrorer #13

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 2 comments

Bump plug from 1.17.0 to 1.18.0

cegela/cege.la #265

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

chore(deps): bump plug from 1.17.0 to 1.18.0 in the prod group

straw-hat-team/beam-monorepo #197

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

chore(deps): bump plug from 1.17.0 to 1.18.0

brianmay/phone_db #1063

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0 in /platform_umbrella

batteries-included/batteries-included #2036

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0 in /integration_test

aaronrenner/sims #78

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago 1 comment

Bump plug from 1.15.0 to 1.18.0

sorentwo/braintree-elixir #222

1.15.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

revelrylabs/slax #515

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

kantox/plug_amqp #77

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

nerves-project/nerves #1074

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

build(deps): bump plug from 1.16.1 to 1.18.0

midarrlabs/web-push-elixir #57

1.16.1 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

swoosh/swoosh #1041

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

build(deps): Bump plug from 1.17.0 to 1.18.0

mbta/http_stage #34

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.16.1 to 1.17.0

qgadrian/metadata_plugs #9

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago 1 comment

build(deps): bump plug from 1.16.1 to 1.17.0

midarrlabs/web-push-elixir #52

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.16.1 to 1.17.0

nerves-project/nerves #1058

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago

build(deps): Bump plug from 1.16.1 to 1.17.0

mbta/http_stage #18

1.16.1 → 1.17.0 Minor PR

Open about 1 year ago 2 comments

Bump plug from 1.16.1 to 1.17.0

Youimmi/phoenix_asset_pipeline #33

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago

Bump plug from 1.14.2 to 1.16.1

primait/cloudflare_access_ex #44

1.14.2 → 1.16.1 Minor PR

Closed almost 2 years ago 1 comment

Bump plug from 1.7.1 to 1.15.3

heroku/plexy #54

1.7.1 → 1.15.3 Minor PR

Closed over 2 years ago 1 comment

Bump plug from 1.11.1 to 1.15.0

GhostGroup/honeybadger-elixir #97

1.11.1 → 1.15.0 Minor PR

Closed over 2 years ago 1 comment

Package Details

Name:	`plug`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/plug`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 4

MODERATE 1

View All hex Advisories

Package Information

Description:

Compose web applications with functions

Repository:	https://github.com/elixir-plug/plug
Homepage:	https://github.com/elixir-plug/plug/blob/main/CHANGELOG.md
Latest Release:	`1.18.0` about 1 year ago
Dependent Repos:	15,508
Dependent Packages:	891
Downloads:	144,010,627
Ranking:	Top 0.0514% by dependent repos Top 0.0642% by downloads Top 0.0193% by dependent pkgs

PR Status

Open 59 (37.6%)

Merged 45 (28.7%)

Closed 43 (27.4%)

PR Types

Minor 98 (62.4%)

Patch 49 (31.2%)

plug

Security Advisories

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service

Arbitrary Code Execution in Cookie Serialization

Header Injection

Null Byte Injection in Plug.Static

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

Recent PRs

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`plug`