Products: 3
    Vulnerabilities: 19
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    8
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-96596

    erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

    Last Modified: Oct 23, 2026
    Published: Oct 14, 2026

    CVE-2026-105274

    hex_core decompresses registry and Erlang term API responses without size limits

    Last Modified: Oct 15, 2026
    Published: Oct 12, 2026

    CVE-2026-81856

    Terminal escape sequence injection in Hex via unneutralized server-supplied output

    Last Modified: Oct 16, 2026
    Published: Oct 12, 2026

    CVE-2026-96612

    Path traversal in Hex via unvalidated dependency app names

    Last Modified: Oct 16, 2026
    Published: Oct 12, 2026

    CVE-2026-105668

    Hex release-age cooldown is lifted package-wide when the locked release is retired

    Last Modified: Oct 16, 2026
    Published: Oct 12, 2026
    Items Per Page
    Hexpm Vulnerabilities & Security CVEs | CVE-DB