| CVE-2026-23940 |
Uncontrolled Resource Consumption vulnerability in hexpm hexpm/hexpm allows Excessive Allocation
|
7.1
High
|
Mar 13, 2026 |
| CVE-2026-21622 |
Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows…
|
9.5
Critical
|
Mar 5, 2026 |
| CVE-2026-21621 |
Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows…
|
7.0
High
|
Mar 5, 2026 |
| CVE-2026-21618 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in hexpm…
|
8.5
High
|
Jan 19, 2026 |