{"id":3693242,"name":"nodejs","ecosystem":"hex","description":"Provides an Elixir API for calling Node.js functions.","homepage":null,"licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/revelrylabs/elixir-nodejs","keywords_array":[],"namespace":null,"versions_count":14,"first_release_published_at":"2018-08-01T19:12:00.694Z","latest_release_published_at":"2026-03-23T17:24:37.228Z","latest_release_number":"3.1.4","last_synced_at":"2026-04-04T01:12:20.686Z","created_at":"2022-04-11T11:36:45.463Z","updated_at":"2026-04-04T05:12:32.938Z","registry_url":"https://hex.pm/packages/nodejs/","install_command":"mix hex.package fetch nodejs ","documentation_url":"http://hexdocs.pm/nodejs/","metadata":{},"repo_metadata":{"id":41125022,"uuid":"143190332","full_name":"revelrylabs/elixir-nodejs","owner":"revelrylabs","description":"An Elixir API for calling Node.js functions","archived":false,"fork":false,"pushed_at":"2024-05-22T21:40:15.000Z","size":137,"stargazers_count":190,"open_issues_count":9,"forks_count":30,"subscribers_count":35,"default_branch":"master","last_synced_at":"2024-05-22T21:52:54.253Z","etag":null,"topics":["elixir","nodejs"],"latest_commit_sha":null,"homepage":null,"language":"Elixir","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/revelrylabs.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-08-01T17:57:12.000Z","updated_at":"2024-05-28T17:40:01.374Z","dependencies_parsed_at":"2024-05-28T17:39:55.433Z","dependency_job_id":null,"html_url":"https://github.com/revelrylabs/elixir-nodejs","commit_stats":{"total_commits":97,"total_committers":14,"mean_commits":6.928571428571429,"dds":0.6907216494845361,"last_synced_commit":"b5c96047c54b70873fc1efa4f716233c569d23c8"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/revelrylabs","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":219876291,"owners_count":16554740,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"revelrylabs","name":"Revelry","uuid":"43271","kind":"organization","description":"","email":"hello@revelry.co","website":"http://revelry.co","location":"New Orleans","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/43271?v=4","repositories_count":70,"last_synced_at":"2024-04-14T02:47:48.018Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/revelrylabs","funding_links":[],"total_stars":707,"followers":31,"following":0,"created_at":"2022-11-05T17:10:35.985Z","updated_at":"2024-04-14T02:48:07.869Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/revelrylabs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/revelrylabs/repositories"},"tags":[{"name":"v3.1.0","sha":"8b4e84115cc49554bd3831b5898857708cbcc4a6","kind":"commit","published_at":"2024-05-28T14:54:10.000Z","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/v3.1.0","html_url":"https://github.com/revelrylabs/elixir-nodejs/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.1.0/manifests"},{"name":"v3.0.0b","sha":"f6acc7c407f07414a4c708aefd4b18e9bbac354f","kind":"commit","published_at":"2024-05-22T21:38:55.000Z","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/v3.0.0b","html_url":"https://github.com/revelrylabs/elixir-nodejs/releases/tag/v3.0.0b","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.0.0b","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.0.0b/manifests"},{"name":"v3.0.0a","sha":"584d1d9e4a7c6129ceed0ad10a81716b21731f69","kind":"commit","published_at":"2024-05-22T21:28:05.000Z","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/v3.0.0a","html_url":"https://github.com/revelrylabs/elixir-nodejs/releases/tag/v3.0.0a","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.0.0a","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.0.0a/manifests"},{"name":"v3.0.0","sha":"94748d6409c8f5d10c08a57abc5f4559391cec26","kind":"commit","published_at":"2024-05-22T21:13:38.000Z","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/v3.0.0","html_url":"https://github.com/revelrylabs/elixir-nodejs/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/v3.0.0/manifests"},{"name":"2.0.0","sha":"4ea986850f9f425a6128ad59443b312809c264cf","kind":"tag","published_at":"2020-08-19T23:25:09.000Z","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/2.0.0","html_url":"https://github.com/revelrylabs/elixir-nodejs/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/2.0.0/manifests"},{"name":"1.0.0","sha":"f9d9c14c14000304d691125515daf77fd76e9317","kind":"commit","published_at":"2018-11-15T19:06:44.000Z","download_url":"https://codeload.github.com/revelrylabs/elixir-nodejs/tar.gz/1.0.0","html_url":"https://github.com/revelrylabs/elixir-nodejs/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/tags/1.0.0/manifests"}]},"repo_metadata_updated_at":"2024-09-28T09:09:20.154Z","dependent_packages_count":8,"downloads":667679,"downloads_period":"total","dependent_repos_count":22,"rankings":{"downloads":6.760840998685939,"dependent_repos_count":3.7523822041138204,"dependent_packages_count":2.7733964248159833,"stargazers_count":4.756898817345598,"forks_count":5.157687253613666,"docker_downloads_count":null,"average":4.640241139715001},"purl":"pkg:hex/nodejs","advisories":[{"uuid":"GSA_kwCzR0hTQS1yd2NyLXJwY2MtM2c5bc4ABUU2","url":"https://github.com/advisories/GHSA-rwcr-rpcc-3g9m","title":"elixir-nodejs has Cross-User Data Leakage or Information Disclosure due to Worker Protocol Race Condition","description":"### Impact\n\nThis vulnerability results in Cross-User Data Leakage or Information Disclosure due to a race condition in the worker protocol.\n\nThe lack of request-response correlation creates a \"stale response\" vulnerability. Because the worker does not verify which request a response belongs to, it may return the next available data in the buffer to an unrelated caller.\n\nIn high-throughput environments where the library processes sensitive user data (e.g., PII, authentication tokens, or private records), a timeout or high concurrent load can cause Data A (belonging to User A) to be returned to User B.\n\nThis may lead to unauthorized information disclosure that is difficult to trace, as the application may not throw an error but instead provide \"valid-looking\" yet entirely incorrect and private data to the wrong session.\n\n### Patches\n\nfixed in v3.1.4\n\n### Resources\nhttps://github.com/revelrylabs/elixir-nodejs/issues/100\n\nhttps://github.com/revelrylabs/elixir-nodejs/pull/105","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-03-26T18:23:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/revelrylabs/elixir-nodejs/security/advisories/GHSA-rwcr-rpcc-3g9m","https://github.com/revelrylabs/elixir-nodejs/issues/100","https://github.com/revelrylabs/elixir-nodejs/pull/105","https://github.com/revelrylabs/elixir-nodejs/releases/tag/v3.1.4","https://nvd.nist.gov/vuln/detail/CVE-2026-33872","https://github.com/advisories/GHSA-rwcr-rpcc-3g9m"],"source_kind":"github","identifiers":["GHSA-rwcr-rpcc-3g9m","CVE-2026-33872"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-26T19:00:09.001Z","updated_at":"2026-04-04T04:00:25.955Z","epss_percentage":0.0008,"epss_percentile":0.23817,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yd2NyLXJwY2MtM2c5bc4ABUU2","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yd2NyLXJwY2MtM2c5bc4ABUU2","packages":[{"ecosystem":"hex","package_name":"nodejs","versions":[{"first_patched_version":"3.1.4","vulnerable_version_range":"\u003c 3.1.4"}],"purl":null,"statistics":{"dependent_packages_count":8,"dependent_repos_count":22,"downloads":667144,"downloads_period":"total"},"affected_versions":["0.1.0","0.2.0","0.2.1","0.2.2","0.2.3","1.0.0","1.1.0","2.0.0","3.0.0","3.1.0","3.1.1","3.1.2","3.1.3"],"unaffected_versions":["3.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yd2NyLXJwY2MtM2c5bc4ABUU2/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/hex/nodejs","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/hex/nodejs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/hex/nodejs/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2024-08-28T03:55:09.749Z","issues_count":14,"pull_requests_count":74,"avg_time_to_close_issue":12010302.888888888,"avg_time_to_close_pull_request":7424395.391891892,"issues_closed_count":9,"pull_requests_closed_count":74,"pull_request_authors_count":19,"issue_authors_count":12,"avg_comments_per_issue":1.9285714285714286,"avg_comments_per_pull_request":0.9594594594594594,"merged_pull_requests_count":41,"bot_issues_count":0,"bot_pull_requests_count":46,"past_year_issues_count":1,"past_year_pull_requests_count":7,"past_year_avg_time_to_close_issue":3389030.0,"past_year_avg_time_to_close_pull_request":560196.4285714285,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":7,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":1.7142857142857142,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":5,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/revelrylabs%2Felixir-nodejs/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/nodejs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/nodejs/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/nodejs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/nodejs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/nodejs/codemeta","maintainers":[{"uuid":"revelrylabs","login":"revelrylabs","name":null,"email":null,"url":null,"packages_count":12,"html_url":"https://hex.pm/users/revelrylabs","role":null,"created_at":"2022-11-08T13:20:21.013Z","updated_at":"2022-11-08T13:20:21.013Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/maintainers/revelrylabs/packages"}]}