https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T03:20:17.727410+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-35422 cnvd-2017-35422 2026-10-23T03:20:17.730423+00:00 cnvd-2017-35422 https://cve.radiocsirt.org/vuln/euvd-2026-80742 EUVD-2026-80742 2026-10-23T03:20:17.730456+00:00 EUVD-2026-80742 https://cve.radiocsirt.org/vuln/fkie_cve-2017-1000053 fkie_cve-2017-1000053 2026-10-23T03:20:17.730471+00:00

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.

 https://cve.radiocsirt.org/vuln/ghsa-5v4m-c73v-c7gq GHSA-5v4m-c73v-c7gq — Arbitrary Code Execution in Cookie Serialization 2026-10-23T03:20:17.730498+00:00

Affected: Hex: plug

The default serialization used by Plug session may result in code execution in certain situations. Keep in mind, however, the session cookie is signed and this attack can only be exploited if the attacker has access to your secret key as well as your signing/encryption salts. We recommend users to change their secret key base and salts if they suspect they have been leaked, regardless of this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2017-1000053 gsd-2017-1000053 2026-10-23T03:20:17.730524+00:00 gsd-2017-1000053