CRITICAL9.8
GHSA-2xxx-fhc8-9qvq
Ecto missing `is_nil` requirement
Quick fix
GHSA-2xxx-fhc8-9qvq — ecto: upgrade to the fixed version with the command below.
mix deps.update ectoDetails
Ecto will not raise on queries with non-explicit nil comparisons (ie if they aren't checked with `is_nil`).
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-20166[ADVISORY]
- https://github.com/elixir-ecto/ecto/pull/2125[WEB]
- https://github.com/elixir-ecto/ecto/commit/db55b0cba6525c24ebddc88ef9ae0c1c00620250[WEB]
- https://github.com/elixir-ecto/ecto[PACKAGE]
- https://groups.google.com/forum/#!topic/elixir-ecto/0m4NPfg_MMU[WEB]