Skip to content

Vulnerabilities of hexpm hex_core

Is your version affected?

CVE Summary Score Published
CVE-2026-96596 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm… 5.9 Medium Oct 14, 2026
CVE-2026-105274 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted… 2.1 Low Oct 12, 2026
CVE-2026-103502 Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections… 5.9 Medium Oct 12, 2026
CVE-2026-21619 Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api… 2.0 Low Feb 27, 2026

Other hexpm products