hexpm hex_core vulnerabilities
4 published CVEs name hexpm hex_core among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-96596
erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole
erlang · rebar3
Medium5.9 - CVE-2026-105274
hex_core decompresses registry and Erlang term API responses without size limits
erlang · rebar3
Low2.1 - CVE-2026-103502
hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25
hexpm · hex_core
Medium5.9 - CVE-2026-21619
Unsafe Deserialization of Erlang Terms in hex_core
hexpm · hex_core
Low2.0