← All credits
José Valim
23 vulnerability records and advisories credit this contributor.
CVE-2026-54892
Plug: quadratic-time decoding of nested query/body parameters enables denial of service
CVE-2026-49762
Unbounded integer parsing in the Version module enables CPU and memory exhaustion denial of service
CVE-2026-8468
Unbounded buffer accumulation in multipart header parsing causes denial of service in plug