Elixir v1.20.1 has been released with a security fix and several bug fixes. The security patch (CVE-2026-49762) limits integer components in the Version module to 14 decimal bytes to prevent parsing excessively large integers from untrusted user input. Developers parsing versions from user input are strongly advised to limit data size passed to the Version module. Bug fixes include capping width in Calendar.strftime/2 to 1024 characters, ensuring Code.require_file releases the file if compilation fails, and fixing documentation generation in Kernel.
203 Impressions