258: CVEs, MCPs, and Petabyte Dreams

News includes the first CVE released under EEF's new CNA program for an Erlang zip traversal vulnerability, Phoenix MacroComponents being delayed for greater potential, Supabase announcing Multigres - a Vitess-like proxy for scaling Postgres to petabyte scale, a surge of new MCP server implementations for Phoenix and Plug including Phantom, HermesMCP, ExMCP, Vancouver, and Excom, a fun blog post revealing that Erlang was the only language that didn't crash under extreme load testing against 6 other languages, LiveDebugger v0.3.0 being teased with Firefox extension support and enhanced debugging capabilities, and more!

Show Notes online - http://podcast.thinkingelixir.com/258

Elixir Community News

• https://www.honeybadger.io/ – Honeybadger.io is sponsoring today's show! Keep your apps healthy and your customers happy with Honeybadger! It's free to get started, and setup takes less than five minutes.


• https://cna.erlef.org/cves/cve-2025-4748.html – New CVE for Erlang regarding zip traversal - 4.8 severity (medium) with workaround available or update to latest patched OTP versions


• First CVE released under the EEF's new CNA (CVE Numbering Authority) program - a successful process milestone


• https://bsky.app/profile/steffend.me/post/3lrlhd5etkc2p – Phoenix MacroComponents is being delayed in search of greater potential


• https://github.com/phoenixframework/phoenix_live_view/pull/3846 – Draft PR for Phoenix MacroComponents development


• https://x.com/supabase/status/1933627932972376097 – Supabase announcement of Multigres project


• https://supabase.com/blog/multigres-vitess-for-postgres – Multigres - Vitess for Postgres, announcement of a new proxy for scaling Postgres databases to petabyte scale


• https://github.com/multigres/multigres – Multigres GitHub repository


• Sugu, co-creator of Vitess, has joined Supabase to build Multigres


• https://hex.pm/packages/phantom_mcp – Phantom MCP server - comprehensive implementation supporting Streamable HTTP with Phoenix/Plug integration


• https://hex.pm/packages/hermes_mcp – HermesMCP - comprehensive MCP server with client, stdio and Plug adapters


• https://hex.pm/packages/ex_mcp – ExMCP - comprehensive MCP implementation with client, server, stdio and Plug adapters, uses Horde for distribution


• https://hex.pm/packages/vancouver – Vancouver MCP server - simple implementation supporting only tools


• https://hex.pm/packages/excom – Excom MCP server - simple implementation supporting only tools


• https://www.youtube.com/watch?v=4dzZ44-xVds – AshAI video demo showing incredible introspection capabilities for MCP frameworks


• https://freedium.cfd/https:/medium.com/@codeperfect/we-tested-7-languages-under-extreme-load-and-only-one-didnt-crash-it-wasn-t-what-we-expected-67f84c79dc34 – Blog post comparing 7 languages under extreme load - Erlang was the only one that didn't crash


• https://github.com/software-mansion/live-debugger – LiveDebugger v0.3.0 release being teased with new features


• https://bsky.app/profile/membrane-swmansion.bsky.social/post/3lrb4kpmmw227 – Software Mansion preview of LiveDebugger v0.3.0 features including Firefox extension and enhanced debugging capabilities


• https://smartlogic.io/podcast/elixir-wizards/s14-e03-langchain-llm-integration-elixir/ – Elixir Wizards podcast episode featuring discussion with Mark Ericksen on the Elixir LangChain project for LLM integration

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at [email protected]

Find us online

• Message the show - Bluesky


• Message the show - X


• Message the show on Fediverse - @[email protected]


• Email the show - [email protected]


• Mark Ericksen on X - @brainlid


• Mark Ericksen on Bluesky - @brainlid.bsky.social


• Mark Ericksen on Fediverse - @[email protected]


• David Bernheisel on Bluesky - @david.bernheisel.com


• David Bernheisel on Fediverse - @[email protected]

Sponsored By:

• Honeybadger.io: Honeybadger is a performance monitoring and error tracking tool that combines the best monitoring features into one simple interface that works with all the frameworks you use and comes with fantastic support from a small team of passionate developers.
  With error tracking, performance and uptime monitoring, log management, dashboards, and more, Honeybadger has everything you need to gain real-time insights into the health of your Elixir and Phoenix applications.
  Keep your apps healthy and your customers happy with Honeybadger!
  It's free to get started, and setup takes less than five minutes.
  Start monitoring today →