`plug`

Ecosystem:
hex

Package URL:
pkg:hex/plug

Total PRs:
157 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
85 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

EEF-CVE-2026-8468 GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 28 days ago • updated about 14 hours ago

## Summary Allocation of Resources Without Limits or Throttling vulnerability in plug\_project plug allows denial of service via unbounded buffer ...

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service

GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 21 days ago • updated 2 days ago

### Summary An Allocation of Resources Without Limits or Throttling vulnerability in `Plug.Conn.read_part_headers/2` allows an unauthenticated att...

1.11.1 → 1.19.2 Minor PR

Closed 26 days ago 3 comments

Bump plug from 1.18.1 to 1.19.1

revelrylabs/slax #559

1.18.1 → 1.19.1 Minor PR

Closed 6 months ago 2 comments

Bump plug from 1.18.1 to 1.19.0

johantell/metatags #195

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

Bump plug from 1.17.0 to 1.19.0

mmilk23/image_unmirrorer #28

1.17.0 → 1.19.0 Minor PR

Closed 6 months ago 2 comments

Bump plug from 1.16.1 to 1.19.0

virtualq/ex_twilio_webhook #37

1.16.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

Bump plug from 1.18.1 to 1.19.0

ndrluis/ex_iceberg #40

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump plug from 1.18.1 to 1.19.0 in the prod group

straw-hat-team/beam-monorepo #259

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 2 comments

Bump plug from 1.18.0 to 1.19.0

dwyl/useful #87

1.18.0 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

build(deps): bump plug from 1.18.1 to 1.19.0

mimiquate/slack_request #41

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

build(deps-dev): bump plug from 1.18.1 to 1.19.0

midarrlabs/web-push-elixir #70

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.1 in the prod group

opallabs/jsonapi #23

1.17.0 → 1.18.1 Minor PR

Closed 7 months ago 1 comment

Bump plug from 1.3.0 to 1.18.1

dependabot-delegated-dismissal-test/dependabot-all-updates-test-staging #34

1.3.0 → 1.18.1 Minor PR

Closed 7 months ago 1 comment

chore(deps): Bump plug from 1.18.0 to 1.18.1 in the prod group

lud/oaskit #13

1.18.0 → 1.18.1 Patch PR

Closed 10 months ago

chore(deps): bump plug from 1.18.0 to 1.18.1

mrdotb/disco-log #100

1.18.0 → 1.18.1 Patch PR

Closed 10 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.1 in the prod group

opallabs/jsonapi #12

1.17.0 → 1.18.1 Minor PR

Closed 10 months ago 1 comment

deps(elixir): Bump plug from 1.18.0 to 1.18.1 in /elixir

KineticCafe/app_identity #251

1.18.0 → 1.18.1 Patch PR

Closed 10 months ago 1 comment

Bump plug from 1.17.0 to 1.18.1

KineticCafe/ip_access_control #22

1.17.0 → 1.18.1 Minor PR

Closed 10 months ago 1 comment

Bump plug from 1.15.0 to 1.18.1

s3cur3/okay_weather #12

1.15.0 → 1.18.1 Minor PR

Closed 11 months ago 1 comment

Bump plug from 1.18.0 to 1.18.1

mtrudel/excom #4

1.18.0 → 1.18.1 Patch PR

Closed 11 months ago

Bump plug from 1.15.0 to 1.18.1

sorentwo/braintree-elixir #224

1.15.0 → 1.18.1 Minor PR

Closed 11 months ago

build(deps): Bump plug from 1.18.0 to 1.18.1

mbta/http_stage #42

1.18.0 → 1.18.1 Patch PR

Closed 11 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 3 updates

ash-project/ash_rate_limiter #27

1.18.0 → 1.18.1 Patch PR

Closed 11 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0

rodloboz/mistral #20

1.17.0 → 1.18.0 Minor PR

Closed 12 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0 in the prod group

opallabs/jsonapi #10

1.17.0 → 1.18.0 Minor PR

Closed 12 months ago 1 comment

Bump plug from 1.3.0 to 1.18.0

sachin-sandhu/hex #2

1.3.0 → 1.18.0 Minor PR

Closed 12 months ago 1 comment

build(deps): bump plug from 1.17.0 to 1.18.0

mimiquate/slack_request #32

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

build(deps): bump plug from 1.17.0 to 1.18.0

mimiquate/tower_honeybadger #47

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.14.2 to 1.18.0

primait/cloudflare_access_ex #55

1.14.2 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump plug from 1.16.1 to 1.18.0

honeybadger-io/honeybadger-elixir #621

1.16.1 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0

WTTJ/chargebeex #166

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

orbit-apps/elixir-shopifyapi #609

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

mmilk23/image_unmirrorer #13

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 2 comments

Bump plug from 1.15.0 to 1.18.0

sorentwo/braintree-elixir #222

1.15.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

revelrylabs/slax #515

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

kantox/plug_amqp #77

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

build(deps): bump plug from 1.16.1 to 1.18.0

midarrlabs/web-push-elixir #57

1.16.1 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.16.1 to 1.17.0

qgadrian/metadata_plugs #9

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago 1 comment

build(deps): bump plug from 1.16.1 to 1.17.0

midarrlabs/web-push-elixir #52

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago 1 comment

Bump plug from 1.16.1 to 1.17.0

nerves-project/nerves #1058

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago

Bump plug from 1.16.1 to 1.17.0

Youimmi/phoenix_asset_pipeline #33

1.16.1 → 1.17.0 Minor PR

Closed about 1 year ago

Bump plug from 1.14.2 to 1.16.1

primait/cloudflare_access_ex #44

1.14.2 → 1.16.1 Minor PR

Closed almost 2 years ago 1 comment

Bump plug from 1.7.1 to 1.15.3

heroku/plexy #54

1.7.1 → 1.15.3 Minor PR

Closed over 2 years ago 1 comment

Bump plug from 1.11.1 to 1.15.0

GhostGroup/honeybadger-elixir #97

1.11.1 → 1.15.0 Minor PR

Closed over 2 years ago 1 comment

Package Details

Name:	`plug`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/plug`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 4

MODERATE 1

View All hex Advisories

Package Information

Description:

Compose web applications with functions

Repository:	https://github.com/elixir-plug/plug
Homepage:	https://github.com/elixir-plug/plug/blob/main/CHANGELOG.md
Latest Release:	`1.18.0` about 1 year ago
Dependent Repos:	15,508
Dependent Packages:	891
Downloads:	144,010,627
Ranking:	Top 0.0514% by dependent repos Top 0.0642% by downloads Top 0.0193% by dependent pkgs

PR Status

Open 59 (37.6%)

Merged 45 (28.7%)

Closed 43 (27.4%)

PR Types

Minor 98 (62.4%)

Patch 49 (31.2%)

plug

Security Advisories

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service

Arbitrary Code Execution in Cookie Serialization

Null Byte Injection in Plug.Static

Header Injection

Recent PRs (filtered by: Closed )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`plug`