CVE-2026-56813 | elixir-plug up to 1.20.2 Cookies lib/plug/conn/cookies.ex encode injection

July 10, 2026 Yanac

A vulnerability marked as critical has been reported in elixir-plug plug up to 1.16.5/1.17.3/1.18.4/1.19.4/1.20.2. This vulnerability affects the function encode of the file lib/plug/conn/cookies.ex of the component Cookies. This manipulation causes injection.

The identification of this vulnerability is CVE-2026-56813. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More