| CVE-2026-86698 |
Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm hexpm allows a user whose organization…
|
2.3
Low
|
Sep 22, 2026 |
| CVE-2026-75554 |
Insufficient Session Expiration vulnerability in the OAuth token refresh grant in hexpm hexpm allows a user removed from…
|
2.3
Low
|
Aug 24, 2026 |
| CVE-2026-75542 |
Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the…
|
8.3
High
|
Aug 24, 2026 |
| CVE-2026-23940 |
Uncontrolled Resource Consumption vulnerability in hexpm hexpm/hexpm allows Excessive Allocation
|
7.1
High
|
Mar 13, 2026 |
| CVE-2026-21622 |
Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows…
|
9.5
Critical
|
Mar 5, 2026 |
| CVE-2026-21621 |
Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows…
|
7.0
High
|
Mar 5, 2026 |
| CVE-2026-23939 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hexpm/hexpm…
|
6.9
Medium
|
Feb 26, 2026 |
| CVE-2026-21618 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in hexpm…
|
8.5
High
|
Jan 19, 2026 |