June 24, 2025

258: CVEs, MCPs, and Petabyte Dreams

31 minutes

News includes the first CVE released under EEF's new CNA program for an Erlang zip traversal vulnerability, Phoenix MacroComponents being delayed for greater potential, Supabase announcing Multigres - a Vitess-like proxy for scaling Postgres to petabyte scale, a surge of new MCP server implementations for Phoenix and Plug including Phantom, HermesMCP, ExMCP, Vancouver, and Excom, a fun blog post revealing that Erlang was the only language that didn't crash under extreme load testing against 6 other languages, LiveDebugger v0.3.0 being teased with Firefox extension support and enhanced debugging capabilities, and more!

Show Notes online - http://podcast.thinkingelixir.com/258

Elixir Community News

https://www.honeybadger.io/ – Honeybadger.io is sponsoring today's show! Keep your apps healthy and your customers happy with Honeybadger! It's free to get started, and setup takes less than five minutes.

https://cna.erlef.org/cves/cve-2025-4748.html – New CVE for Erlang regarding zip traversal - 4.8 severity (medium) with workaround available or update to latest patched OTP versions

First CVE released under the EEF's new CNA (CVE Numbering Authority) program - a successful process milestone

https://bsky.app/profile/steffend.me/post/3lrlhd5etkc2p – Phoenix MacroComponents is being delayed in search of greater potential

https://github.com/phoenixframework/phoenix_live_view/pull/3846 – Draft PR for Phoenix MacroComponents development

https://x.com/supabase/status/1933627932972376097 – Supabase announcement of Multigres project

https://supabase.com/blog/multigres-vitess-for-postgres – Multigres - Vitess for Postgres, announcement of a new proxy for scaling Postgres databases to petabyte scale

https://github.com/multigres/multigres – Multigres GitHub repository

Sugu, co-creator of Vitess, has joined Supabase to build Multigres

https://hex.pm/packages/phantom_mcp – Phantom MCP server - comprehensive implementation supporting Streamable HTTP with Phoenix/Plug integration

https://hex.pm/packages/hermes_mcp – HermesMCP - comprehensive MCP server with client, stdio and Plug adapters

https://hex.pm/packages/ex_mcp – ExMCP - comprehensive MCP implementation with client, server, stdio and Plug adapters, uses Horde for distribution

https://hex.pm/packages/vancouver – Vancouver MCP server - simple implementation supporting only tools

https://hex.pm/packages/excom – Excom MCP server - simple implementation supporting only tools

https://www.youtube.com/watch?v=4dzZ44-xVds – AshAI video demo showing incredible introspection capabilities for MCP frameworks

https://freedium.cfd/https:/medium.com/@codeperfect/we-tested-7-languages-under-extreme-load-and-only-one-didnt-crash-it-wasn-t-what-we-expected-67f84c79dc34 – Blog post comparing 7 languages under extreme load - Erlang was the only one that didn't crash

https://github.com/software-mansion/live-debugger – LiveDebugger v0.3.0 release being teased with new features

https://bsky.app/profile/membrane-swmansion.bsky.social/post/3lrb4kpmmw227 – Software Mansion preview of LiveDebugger v0.3.0 features including Firefox extension and enhanced debugging capabilities

https://smartlogic.io/podcast/elixir-wizards/s14-e03-langchain-llm-integration-elixir/ – Elixir Wizards podcast episode featuring discussion with Mark Ericksen on the Elixir LangChain project for LLM integration

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at [email protected]

Find us online

Message the show - Bluesky

Message the show - X

Message the show on Fediverse - @[email protected]

Email the show - [email protected]

Mark Ericksen on X - @brainlid

Mark Ericksen on Bluesky - @brainlid.bsky.social

Mark Ericksen on Fediverse - @[email protected]

David Bernheisel on Bluesky - @david.bernheisel.com

David Bernheisel on Fediverse - @[email protected]