CVE-2026-105963

A flaw was found in plugcrypto. An unauthenticated remote attacker can cause sensitive cryptographic secrets, such as the application's secret key base, to be exposed in application logs and crash reports. By submitting request data with unexpected argument types, an attacker triggers a validatio...

SUSE CVE-2026-105963

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

CVE-2026-105963

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

EEF-CVE-2026-105963 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Summary Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto...

EUVD-2026-108666

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

CVE-2026-105963

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

CVE-2026-105963 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

CVE-2026-105963 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

CVE-2026-105963

A vulnerability in plug_crypto (within elixir-plug) allows an unauthenticated remote attacker to expose sensitive information, such as the secret key base , derived keys, or API keys, through application logs. The root cause is a FunctionClauseError triggered when public functions in Plug.Crypto ...

CVE-2026-105963 Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

Externally-Generated Error Message Containing Sensitive Information vulnerability in plugcrypto in elixir-plug plugcrypto allows an unauthenticated remote attacker to expose the secret key base through application logs via a wrong-typed argument. Every public function in Plug.Crypto validates...

elixir-plug Plug log information leakage vulnerability

Versions 1.6.3 through 1.7.0 of elixir-plug Plug and versions 1.0.0 through 2.2.1 of elixir-Plug Plugcrypto contain a log information leakage vulnerability. This vulnerability arises because when Plug.Crypto fails to validate parameter types in its header guard function, the Erlang VM throws a...