Vulnerabilities
Report: CVE-2026-32687 - SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3
CVE ID :CVE-2026-32687 Published : May 12, 2026, 2:18 p.m. | 54 minutes ago Description :Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) allows SQL Injection. The channel argument passed to 'Elixir.Postgrex.Notifications':listen/3 and 'Elixir.Postgrex.Notifications':unlisten/3 is interpolated directly into LISTEN