All products

plug

Hex · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Plug: quadratic-time decoding of nested query/body parameters enables denial of serviceCVE-2026-54892 · GHSA-J43X-5HJQ-RGXF plug Hex High Fix reported
Plug: Unbounded buffer accumulation in multipart header parsing causes denial of serviceCVE-2026-8468 · GHSA-468C-VQ7P-GH64 plug Hex High Fix reported
Header InjectionCVE-2018-1000883 · GHSA-9H73-W7CH-RH73 plug Hex Medium Fix reported
Null Byte Injection in Plug.StaticCVE-2017-1000052 · GHSA-2Q6V-32MR-8P8X plug Hex High Fix reported
Arbitrary Code Execution in Cookie SerializationCVE-2017-1000053 · GHSA-5V4M-C73V-C7GQ plug Hex High Fix reported