| CVE-2026-96596 |
Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm…
|
5.9
Medium
|
Oct 14, 2026 |
| CVE-2026-105274 |
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted…
|
2.1
Low
|
Oct 12, 2026 |
| CVE-2026-81856 |
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package…
|
2.3
Low
|
Oct 12, 2026 |
| CVE-2026-96612 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hex allows a…
|
7.5
High
|
Oct 12, 2026 |
| CVE-2026-105668 |
Protection Mechanism Failure vulnerability in hexpm hex allows the owner of a package, or an attacker who has taken over…
|
7.1
High
|
Oct 12, 2026 |
| CVE-2026-105280 |
Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the…
|
6.9
Medium
|
Oct 12, 2026 |
| CVE-2026-96618 |
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted…
|
2.1
Low
|
Oct 12, 2026 |
| CVE-2026-103503 |
Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and…
|
5.9
Medium
|
Oct 12, 2026 |
| CVE-2026-32148 |
Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency…
|
8.9
High
|
Apr 30, 2026 |
| CVE-2026-21619 |
Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api…
|
2.0
Low
|
Feb 27, 2026 |