hexpm hex_core vulnerabilities

4 published CVEs name hexpm hex_core among the affected products.

All 4 in the list Atom feed of new CVEs

Published CVEs: 4
Last 12 months: 4
Critical: 0
Known exploited: 0

Critical 0High 0Medium 2Low 2Not scored 0

Newest CVEs

CVE-2026-96596
erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole
erlang · rebar3
Medium5.9
CVE-2026-105274
hex_core decompresses registry and Erlang term API responses without size limits
erlang · rebar3
Low2.1
CVE-2026-103502
hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25
hexpm · hex_core
Medium5.9
CVE-2026-21619
Unsafe Deserialization of Erlang Terms in hex_core
hexpm · hex_core
Low2.0

Most common weaknesses