CVE-2026-54892 | elixir-plug up to 1.19.2 lib/plug/conn/query.ex algorithmic complexity

June 23, 2026 Yanac

A vulnerability classified as problematic was found in elixir-plug plug up to 1.15.4/1.16.3/1.17.1/1.18.2/1.19.2. This impacts an unknown function in the library lib/plug/conn/query.ex. The manipulation results in inefficient algorithmic complexity.

This vulnerability is identified as CVE-2026-54892. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More