CVE-2026-80227: Elixir Sql Unescaped Regex Whitespace

Unescaped regex escape sequence '\s' in SQL string fragment. In Elixir string literals, '\s' evaluates to a single space character (0x20) instead of the SQL regex whitespace class '\\s'. This causes REGEXP_REPLACE or regex operators to match only literal spaces rather than all whitespace characters.

Provally CuratedPublic repositoryMediumHigh confidenceVerifiedApache-2.0Elixir
greprules fetch cve-2026-80227-elixir-sql-unescaped-regex-whitespace --engine opengrep

Description

Unescaped regex escape sequence '\s' in SQL string fragment. In Elixir string literals, '\s' evaluates to a single space character (0x20) instead of the SQL regex whitespace class '\\s'. This causes REGEXP_REPLACE or regex operators to match only literal spaces rather than all whitespace characters.