CVE-2026-78699: Ecto Unchecked Alter Schema

Detected non-raising 'Ecto.Adapters.SQL.query' call executing an 'ALTER SCHEMA' DDL statement without validating the return value. If PostgreSQL rejects the schema operation (e.g. name collision), the failure may be silently ignored. Use 'Ecto.Adapters.SQL.query!' or explicitly handle the '{:ok, _} | {:error, _}' result tuple.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Elixir
greprules fetch cve-2026-78699-ecto-unchecked-alter-schema --engine opengrep

Description

Detected non-raising 'Ecto.Adapters.SQL.query' call executing an 'ALTER SCHEMA' DDL statement without validating the return value. If PostgreSQL rejects the schema operation (e.g. name collision), the failure may be silently ignored. Use 'Ecto.Adapters.SQL.query!' or explicitly handle the '{:ok, _} | {:error, _}' result tuple.