Reposted by @barnabasj.bsky.social
💥 Elixir PSA: update Plug *immediately* to the latest possible (1.20.1)
The latest CVE makes it trivially easy to DOS a plug based server.
cna.erlef.org/cves/CVE-202...
This one is a doozy stay safe out there and keep your deps updated!
#elixir-lang
cna.erlef.org
Plug: quadratic-time decoding of nested query/body parameters enables denial of service
This project handles the CVE Numbering Authority (CNA) for the Erlang Ecosystem Foundation (EEF).