CVE-2026-66838 | elixir-ecto postgrex 0.19.3/0.22.3 Postgrex.stream Comment sql injection

August 7, 2026 Yanac

A vulnerability classified as critical was found in elixir-ecto postgrex 0.19.3/0.22.3. Affected by this vulnerability is the function Postgrex.stream. Such manipulation of the argument Comment leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-66838. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More