Elixir Sydney: Plugging CVEs and Temporal Postgres

​We're back at Decidr in the Sydney CBD on 15th July, with two great talks locked in: Braidon Whatley and Julian Doherty on the quadratic-time Plug CVE they found and what it means, and Mike Buhot on PostgreSQL 19's new temporal data features.

​Finding and Plugging a CVE

​Braidon Whatley & Julian Doherty

​Braidon Whatley and Julian Doherty walk through how Braidon discovered and reported CVE-2026-54892, a high-severity denial-of-service vulnerability in Plug. A look at how a subtle bug in a widely-used library turns into a serious security problem, and how responsible disclosure works in the BEAM ecosystem.

​It's time! PostgreSQL 19 for temporal data

​Mike Buhot

​Postgres 19 beta is out, and ships with some amazing new features for working with temporal data models. In this talk, I'll cover how to design a temporal schema, giving you time travel super powers to query your database as of any time in the past or future! We'll look at practical tools for Elixir developers, accessing the new features from Ecto, Ash, and Gleam.

Google Meet Link: https://meet.google.com/nvj-iodu-gnr

​---

​Got a talk in you? We're after speakers, full-length or lightning, and first-timers are very welcome. Pitch us a talk.