258: CVEs, MCPs, and Petabyte Dreams

News includes the first CVE released under EEF's new CNA program for an Erlang zip traversal vulnerability, Phoenix MacroComponents being delayed for greater potential, Supabase announcing Multigres - a Vitess-like proxy for scaling Postgres to petabyte scale, a surge of new MCP server implementations for Phoenix and Plug including Phantom, HermesMCP, ExMCP, Vancouver, and Excom, a fun blog post revealing that Erlang was the only language that didn't crash under extreme load testing against 6 other languages, LiveDebugger v0.3.0 being teased with Firefox extension support and enhanced debugging capabilities, and more!

Show Notes online - http://podcast.thinkingelixir.com/258

Elixir Community News

• https://www.honeybadger.io/ – Honeybadger.io is sponsoring today's show! Keep your apps healthy and your customers happy with Honeybadger! It's free to get started, and setup takes less than five minutes.
• https://cna.erlef.org/cves/cve-2025-4748.html – New CVE for Erlang regarding zip traversal - 4.8 severity (medium) with workaround available or update to latest patched OTP versions
• First CVE released under the EEF's new CNA (CVE Numbering Authority) program - a successful process milestone
• https://bsky.app/profile/steffend.me/post/3lrlhd5etkc2p – Phoenix MacroComponents is being delayed in search of greater potential
• https://github.com/phoenixframework/phoenix_live_view/pull/3846 – Draft PR for Phoenix MacroComponents development
• https://x.com/supabase/status/1933627932972376097 – Supabase announcement of Multigres project
• https://supabase.com/blog/multigres-vitess-for-postgres – Multigres - Vitess for Postgres, announcement of a new proxy for scaling Postgres databases to petabyte scale
• https://github.com/multigres/multigres – Multigres GitHub repository
• Sugu, co-creator of Vitess, has joined Supabase to build Multigres
• https://hex.pm/packages/phantom_mcp – Phantom MCP server - comprehensive implementation supporting Streamable HTTP with Phoenix/Plug integration
• https://hex.pm/packages/hermes_mcp – HermesMCP - comprehensive MCP server with client, stdio and Plug adapters
• https://hex.pm/packages/ex_mcp – ExMCP - comprehensive MCP implementation with client, server, stdio and Plug adapters, uses Horde for distribution
• https://hex.pm/packages/vancouver – Vancouver MCP server - simple implementation supporting only tools
• https://hex.pm/packages/excom – Excom MCP server - simple implementation supporting only tools
• https://www.youtube.com/watch?v=4dzZ44-xVds – AshAI video demo showing incredible introspection capabilities for MCP frameworks
• https://freedium.cfd/https:/medium.com/@codeperfect/we-tested-7-languages-under-extreme-load-and-only-one-didnt-crash-it-wasn-t-what-we-expected-67f84c79dc34 – Blog post comparing 7 languages under extreme load - Erlang was the only one that didn't crash
• https://github.com/software-mansion/live-debugger – LiveDebugger v0.3.0 release being teased with new features
• https://bsky.app/profile/membrane-swmansion.bsky.social/post/3lrb4kpmmw227 – Software Mansion preview of LiveDebugger v0.3.0 features including Firefox extension and enhanced debugging capabilities
• https://smartlogic.io/podcast/elixir-wizards/s14-e03-langchain-llm-integration-elixir/ – Elixir Wizards podcast episode featuring discussion with Mark Ericksen on the Elixir LangChain project for LLM integration

Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at [email protected]

Find us online

• Message the show - Bluesky
• Message the show - X
• Message the show on Fediverse - @[email protected]
• Email the show - [email protected]
• Mark Ericksen on X - @brainlid
• Mark Ericksen on Bluesky - @brainlid.bsky.social
• Mark Ericksen on Fediverse - @[email protected]
• David Bernheisel on Bluesky - @david.bernheisel.com
• David Bernheisel on Fediverse - @[email protected]