CVE-2017-1000212: Alchemist-Elixir Alchemist-Server

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.

Affected products

• Alchemist-Elixir Alchemist-Server: affected versions not specified

Published 2017-11-17. Last modified 2026-06-17.