CVE-2026-105963 | elixir-plug plug/plug_crypto Plug.Crypto.verify/Plug.Crypto.secure_compare information disclosure

October 23, 2026 Yanac

A vulnerability labeled as problematic has been found in elixir-plug plug and plug_crypto. This issue affects the function Plug.Crypto.verify/Plug.Crypto.secure_compare of the component plug_crypto. Executing a manipulation can lead to information disclosure.

This vulnerability appears as CVE-2026-105963. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More