EEF-CVE-2026-105963 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Summary Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto...

CVE-2026-105963

A vulnerability in plug_crypto (within elixir-plug) allows an unauthenticated remote attacker to expose sensitive information, such as the secret key base , derived keys, or API keys, through application logs. The root cause is a FunctionClauseError triggered when public functions in Plug.Crypto ...

CVE-2026-105963 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...