plug vulnerabilities (Hex)
8 vulnerabilities.
-
plugHex Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments 5.1 Medium -
plugHex Cookie attribute injection in Plug.Conn.Cookies.encode/2 2.1 Low -
plugHex Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) 6.9 Medium -
plugHex Plug: quadratic-time decoding of nested query/body parameters enables denial of service 8.7 High -
plugHex Unbounded buffer accumulation in multipart header parsing causes denial of service in plug 8.2 High -
plugHex Header Injection 6.5 Medium -
plugHex Arbitrary Code Execution in Cookie Serialization 8.1 High -
plugHex Null Byte Injection in Plug.Static 7.8 High