CVE-2017-20166: Ecto missing `is_nil` requirement

Severity: Critical

CVSS Score: 9.8

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.