Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

plug

Ecosystem:
hex
Package URL:
pkg:hex/plug
Total PRs:
157 Dependabot PRs
Latest PR:
17 days ago
Unique Repositories:
85 repositories
Unique Repos (30 days):
3 repositories
Security Advisories
Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service
GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 23 days ago • updated 4 days ago
### Summary An Allocation of Resources Without Limits or Throttling vulnerability in `Plug.Conn.read_part_headers/2` allows an unauthenticated att...
Arbitrary Code Execution in Cookie Serialization
GHSA-5v4m-c73v-c7gq CVE-2017-1000053 HIGH published about 4 years ago • updated about 17 hours ago
The default serialization used by Plug session may result in code execution in certain situations. Keep in mind, however, the session cookie is s...
Header Injection
GHSA-9h73-w7ch-rh73 CVE-2018-1000883 MODERATE published about 4 years ago • updated about 24 hours ago
Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added....
Null Byte Injection in Plug.Static
GHSA-2q6v-32mr-8p8x CVE-2017-1000052 HIGH published about 4 years ago • updated about 24 hours ago
Plug.Static is used for serving static assets, and is vulnerable to null byte injection. If file upload functionality is provided, this can allow...
Unbounded buffer accumulation in multipart header parsing causes denial of service in plug
EEF-CVE-2026-8468 GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 29 days ago • updated about 22 hours ago
## Summary Allocation of Resources Without Limits or Throttling vulnerability in plug\_project plug allows denial of service via unbounded buffer ...
Recent PRs (filtered by: Merged , Patch PRs )
RSS Feed Clear filter
Bump plug from 1.18.0 to 1.18.1

lucacorti/jsonapi_plug #104

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
lucacorti
Bump plug from 1.18.0 to 1.18.1

mtrudel/bandit #506

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
mtrudel
chore(deps): bump plug from 1.18.0 to 1.18.1 in the prod group

beam-community/redbird #94

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
beam-community
build(deps): bump plug from 1.18.0 to 1.18.1

mimiquate/tower_rollbar #85

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
mimiquate
Bump plug from 1.18.0 to 1.18.1

podium/simple_token_authentication #84

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
podium
build(deps): bump plug from 1.18.0 to 1.18.1

profiq/discord-interactions-elixir #15

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago 1 comment
profiq
Bump plug from 1.18.0 to 1.18.1

dwyl/content #87

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
dwyl
Bump plug from 1.18.0 to 1.18.1

ExWeb3/elixir_ethers #213

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
ExWeb3
chore(deps): bump plug from 1.18.0 to 1.18.1 in the prod group

beam-community/bamboo #716

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
beam-community
Bump plug from 1.18.0 to 1.18.1

lucacorti/ankh #181

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
lucacorti
build(deps): bump plug from 1.18.0 to 1.18.1

jpcaruana/last_crusader #300

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
jpcaruana
Bump plug from 1.18.0 to 1.18.1

podium/uinta #99

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
podium
Bump plug from 1.18.0 to 1.18.1

nerves-hub/nerves_hub_web #2191

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
nerves-hub
chore(deps): bump the production-dependencies group with 4 updates

ash-project/ash_json_api #356

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
ash-project
Bump plug from 1.18.0 to 1.18.1

erlef/mix-dependency-submission #148

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago 1 comment
erlef
Bump plug from 1.18.0 to 1.18.1

erlef/oid_certo #19

1.18.0 → 1.18.1 Patch PR
Merged 11 months ago
erlef
Bump plug from 1.18.0 to 1.18.1

johantell/metatags #175

1.18.0 → 1.18.1 Patch PR
Merged 12 months ago 1 comment
johantell
deps(deps): bump plug from 1.18.0 to 1.18.1

customeros/core #618

1.18.0 → 1.18.1 Patch PR
Merged 12 months ago 1 comment
customeros
Bump plug from 1.18.0 to 1.18.1

primait/teleplug #178

1.18.0 → 1.18.1 Patch PR
Merged 12 months ago
primait
Bump plug from 1.18.0 to 1.18.1

martide/trailing_slash_plug #58

1.18.0 → 1.18.1 Patch PR
Merged 12 months ago
martide
chore(deps): bump plug from 1.18.0 to 1.18.1 in the production-dependencies group

ash-project/ash #2176

1.18.0 → 1.18.1 Patch PR
Merged 12 months ago
ash-project
build(deps): bump plug from 1.18.0 to 1.18.1

brianmay/phone_db #1072

1.18.0 → 1.18.1 Patch PR
Merged 12 months ago
brianmay
Package Details
Name: plug
Ecosystem: hex
PURL Type: hex
Package URL: pkg:hex/plug
JSON API: View JSON
Security Advisories

5

Active advisories
HIGH 4
MODERATE 1
View All hex Advisories
Package Information
Description:

Compose web applications with functions

Repository: https://github.com/elixir-plug/plug
Homepage: https://github.com/elixir-plug/plug/blob/main/CHANGELOG.md
Latest Release: 1.18.0
about 1 year ago
Dependent Repos: 15,508
Dependent Packages: 891
Downloads: 144,010,627
Ranking: Top 0.0514% by dependent repos Top 0.0642% by downloads Top 0.0193% by dependent pkgs
PR Status
Open 59 (37.6%)
Merged 45 (28.7%)
Closed 43 (27.4%)
PR Types
Minor 98 (62.4%)
Patch 49 (31.2%)