CVE-2017-20166: Ecto Project Ecto

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.

Affected products

• Ecto Project Ecto: version 2.2.0 only

Published 2023-01-10. Last modified 2026-06-17.