`plug`

Ecosystem:
hex

Package URL:
pkg:hex/plug

Total PRs:
157 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
85 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

EEF-CVE-2026-8468 GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 28 days ago • updated about 16 hours ago

## Summary Allocation of Resources Without Limits or Throttling vulnerability in plug\_project plug allows denial of service via unbounded buffer ...

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service

GHSA-468c-vq7p-gh64 CVE-2026-8468 HIGH published 21 days ago • updated 2 days ago

### Summary An Allocation of Resources Without Limits or Throttling vulnerability in `Plug.Conn.read_part_headers/2` allows an unauthenticated att...

1.11.1 → 1.19.2 Minor PR

Closed 26 days ago 3 comments

Bump plug from 1.18.1 to 1.19.1

erlef/mix-dependency-submission #205

1.18.1 → 1.19.1 Minor PR

Open 6 months ago 2 comments

Bump plug from 1.18.1 to 1.19.1

revelrylabs/slax #559

1.18.1 → 1.19.1 Minor PR

Closed 6 months ago 2 comments

Bump plug from 1.18.1 to 1.19.0

johantell/metatags #195

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

Bump plug from 1.17.0 to 1.19.0

mmilk23/image_unmirrorer #28

1.17.0 → 1.19.0 Minor PR

Closed 6 months ago 2 comments

Bump plug from 1.16.1 to 1.19.0

virtualq/ex_twilio_webhook #37

1.16.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

Bump plug from 1.18.1 to 1.19.0

ndrluis/ex_iceberg #40

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump plug from 1.18.1 to 1.19.0 in the prod group

straw-hat-team/beam-monorepo #259

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 2 comments

Bump plug from 1.18.0 to 1.19.0

dwyl/useful #87

1.18.0 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 3 updates

ChristianAlexander/ash_circuit_breaker #15

1.18.1 → 1.19.0 Minor PR

Open 6 months ago 1 comment

build(deps): bump plug from 1.18.1 to 1.19.0

mimiquate/slack_request #41

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

Bump plug from 1.18.1 to 1.19.0

erlef/mix-dependency-submission #203

1.18.1 → 1.19.0 Minor PR

Open 6 months ago 2 comments

build(deps-dev): bump plug from 1.18.1 to 1.19.0

midarrlabs/web-push-elixir #70

1.18.1 → 1.19.0 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.1 in the prod group

opallabs/jsonapi #23

1.17.0 → 1.18.1 Minor PR

Closed 7 months ago 1 comment

Bump plug from 1.3.0 to 1.18.1

dependabot-delegated-dismissal-test/dependabot-all-updates-test-staging #34

1.3.0 → 1.18.1 Minor PR

Closed 7 months ago 1 comment

Bump plug from 1.15.3 to 1.18.1

signdict/website #1696

1.15.3 → 1.18.1 Minor PR

Merged 8 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.1 in the prod group

opallabs/jsonapi #12

1.17.0 → 1.18.1 Minor PR

Closed 10 months ago 1 comment

Bump plug from 1.17.0 to 1.18.1

KineticCafe/ip_access_control #22

1.17.0 → 1.18.1 Minor PR

Closed 10 months ago 1 comment

build(deps): bump plug from 1.17.0 to 1.18.1

mimiquate/tower_honeybadger #52

1.17.0 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.7.1 to 1.18.1

heroku/plexy #56

1.7.1 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.15.0 to 1.18.1

s3cur3/okay_weather #12

1.15.0 → 1.18.1 Minor PR

Closed 11 months ago 1 comment

build(deps): bump plug from 1.17.0 to 1.18.1

mimiquate/slack_request #34

1.17.0 → 1.18.1 Minor PR

Open 11 months ago 2 comments

Bump plug from 1.3.0 to 1.18.1

sachin-sandhu/hex #3

1.3.0 → 1.18.1 Minor PR

Open 11 months ago

chore(deps): bump plug from 1.17.0 to 1.18.1

WTTJ/chargebeex #168

1.17.0 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.16.1 to 1.18.1

virtualq/ex_twilio_webhook #31

1.16.1 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.14.2 to 1.18.1

primait/cloudflare_access_ex #64

1.14.2 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.17.0 to 1.18.1

revelrylabs/slax #527

1.17.0 → 1.18.1 Minor PR

Open 11 months ago 1 comment

Bump plug from 1.15.0 to 1.18.1

sorentwo/braintree-elixir #224

1.15.0 → 1.18.1 Minor PR

Closed 11 months ago

build(deps): bump plug from 1.16.1 to 1.18.1

midarrlabs/web-push-elixir #59

1.16.1 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.17.0 to 1.18.1

kantox/plug_amqp #78

1.17.0 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.17.0 to 1.18.1

nerves-project/nerves #1077

1.17.0 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.17.0 to 1.18.1

orbit-apps/elixir-shopifyapi #615

1.17.0 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.17.0 to 1.18.1

mmilk23/image_unmirrorer #17

1.17.0 → 1.18.1 Minor PR

Open 11 months ago

Bump plug from 1.17.0 to 1.18.0

dwyl/auth_plug #190

1.17.0 → 1.18.0 Minor PR

Open 11 months ago

Bump plug from 1.16.1 to 1.18.0

KeenMate/keen_redbird #2

1.16.1 → 1.18.0 Minor PR

Open 12 months ago

chore(deps): bump plug from 1.17.0 to 1.18.0

rodloboz/mistral #20

1.17.0 → 1.18.0 Minor PR

Closed 12 months ago 1 comment

chore(deps): bump plug from 1.17.0 to 1.18.0 in the prod group

opallabs/jsonapi #10

1.17.0 → 1.18.0 Minor PR

Closed 12 months ago 1 comment

Bump plug from 1.3.0 to 1.18.0

sachin-sandhu/hex #2

1.3.0 → 1.18.0 Minor PR

Closed 12 months ago 1 comment

build(deps): bump plug from 1.17.0 to 1.18.0

mimiquate/slack_request #32

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

chore(deps-dev): bump the dev-dependencies group with 2 updates

ash-project/reactor_req #2

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

Bump plug from 1.17.0 to 1.18.0

general-CbIC/poolex_prom_ex #40

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

build(deps): bump plug from 1.17.0 to 1.18.0

mimiquate/tower_honeybadger #47

1.17.0 → 1.18.0 Minor PR

Closed about 1 year ago 1 comment

build(deps): bump plug from 1.17.0 to 1.18.0

mimiquate/tower_rollbar #80

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.17.0 to 1.18.0

podium/simple_token_authentication #82

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

build(deps): bump plug from 1.17.0 to 1.18.0

profiq/discord-interactions-elixir #4

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago 1 comment

Bump the deps group with 2 updates

kevinschweikert/live_premier #23

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.17.0 to 1.18.0

lucacorti/jsonapi_plug #100

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

build(deps): bump plug from 1.17.0 to 1.18.0

canidae-solutions/memorable #8

1.17.0 → 1.18.0 Minor PR

Open about 1 year ago

Bump plug from 1.17.0 to 1.18.0

dwyl/content #85

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Bump plug from 1.17.0 to 1.18.0

dwyl/link #27

1.17.0 → 1.18.0 Minor PR

Merged about 1 year ago

Package Details

Name:	`plug`
Ecosystem:	hex
PURL Type:	hex
Package URL:	`pkg:hex/plug`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 4

MODERATE 1

View All hex Advisories

Package Information

Description:

Compose web applications with functions

Repository:	https://github.com/elixir-plug/plug
Homepage:	https://github.com/elixir-plug/plug/blob/main/CHANGELOG.md
Latest Release:	`1.18.0` about 1 year ago
Dependent Repos:	15,508
Dependent Packages:	891
Downloads:	144,010,627
Ranking:	Top 0.0514% by dependent repos Top 0.0642% by downloads Top 0.0193% by dependent pkgs

PR Status

Open 59 (37.6%)

Merged 45 (28.7%)

Closed 43 (27.4%)

PR Types

Minor 98 (62.4%)

Patch 49 (31.2%)

plug

Security Advisories

Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

Plug: Unbounded buffer accumulation in multipart header parsing causes denial of service

Arbitrary Code Execution in Cookie Serialization

Null Byte Injection in Plug.Static

Header Injection

Recent PRs (filtered by: Minor PRs )

Package Details

Security Advisories

5

Package Information

PR Status

PR Types

`plug`