<<“one prompt, one hour>>
<<The headline isn’t the bug, it’s the find conditions.>>
It’s only the beginning; there’s a race against time to tackle the zero-day vulnerability
www.bugcrowd.com/blog/what-we...
🚨 Please update "decimal" 🚨
A *single* calculation like:
Decimal.new("1e1_000_000_000") |> Decimal.add(1)
will OOM your application. Poof. Adios. Auf Wiedersehen.
cna.erlef.org/cves/CVE-202...
If you're using plug_cowboy, update to the newly-released v2.8.1 to patch a denial-of-service vulnerability related to atom exhaustion.
cna.erlef.org/cves/CVE-202...
#ElixirLang
Copy Fail is a new Linux kernel zero-day that allows any authenticated user to gain root privileges (Local Privilege Escalation, or LPE) on almost every Linux distribution since 2017. An easy-to-use e...
www.bugcrowd.com
This project handles the CVE Numbering Authority (CNA) for the Erlang Ecosystem Foundation (EEF).
Tausende energiehungrige KI-Rechenzentren kommen nach Europa. Unsere Stromrechnungen könnten schnell steigen, wenn wir die Tech-Konzerne nicht verpflichten, diese mit 100 % Erneuerbaren zu betreiben. Unterschreibe jetzt👇 action.wemove.eu/sign/2026-05...
Tausende energiehungrige Rechenzentren entstehen derzeit in Europa. Wie hoch unsere Stromrechnungen ausfallen, hängt davon ab, womit sie betrieben werden – mit teuren fossilen Brennstoffen oder mit he...
jump_credo_checks v0.3.0 is out now, featuring a really nice new check courtesy of @ftes.de.
UnusedLiveViewAssign will tell you if you have places where you write, but never read, a value in your LiveView assigns. 💜
hex.pm/packages/jum...
#ElixirLang
Omas gegen Rechts Paderborn
Hey guys,
We are hiring for mid/senior engineers to come work with us on a health tech product ats.rippling.com/dyad/jobs/93...
It's a remote role within UK due to the data governance regulations.
Please share for reach.
#elixir
A collection of opinionated Credo checks aimed at improving code quality and catching common mistakes in Elixir, Oban, and LiveView
If you’re running #Phoenix Channels (or LiveView) and have the LongPoll option enabled in your endpoint (default since 1.7.11), it’s time to do an update: github.com/phoenixframe...
Thank you @peterullrich.com for finding and disclosing this issue!
About the job We are seeking a Senior Software Engineer with strong fundamentals and self-management skills to join us at a rapid growth st...
### Summary
An unauthenticated denial-of-service vulnerability in Phoenix's long-poll transport allows a remote client to allocate a large amount of memory with a HTTP request. A handful of conc...
LiveView 1.2.0 released.
> Ensure exceptions during LiveComponent renders are emitted as :telemetry event (#4258)
Previously, LiveComponent render errors were not reported in AppSignal.
🥳🙏:
I reported this to AppSignal June 1.
They opened GH issue June 1.
Fixed and released June 11.
#elixirlang
