Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

hex

hex_core

hex

Reference implementation of Hex specifications

View on github.com · View on hex.pm

Security Advisories for hex_core in hex

Medium
9 days ago

erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole EEF-CVE-2026-96596

hex hex_core
Low
11 days ago

hex_core decompresses registry and Erlang term API responses without size limits EEF-CVE-2026-105274

hex hex_core
Medium
11 days ago

hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25 EEF-CVE-2026-103502

hex hex_core
Low
8 months ago

hex_core has Unsafe Deserialization of Erlang Terms GSA_kwCzR0hTQS1oeDl3LWYydzktOWc5Ns4ABS7c

hex hex_core
Low
8 months ago

Unsafe Deserialization of Erlang Terms in hex_core EEF-CVE-2026-21619

hex hex_core
High
over 4 years ago

Hex authenticity of signed packages not validated GSA_kwCzR0hTQS1xM2NjLXJyMmMtODdyNs3uxA

hex hex_core

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity

Low 3 Medium 2 High 1