Skip to content
OpenAdvisories

Package · Hex

hex_core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-105274

    hex_core decompresses registry and Erlang term API responses without size limits

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the memory of the Erlang VM running hex_core. The same code is ve…

    erlang hexpm hex hex_core Debian Ubuntu Hex
  • Low 2.0
    CVE-2026-21619

    Unsafe Deserialization of Erlang Terms in hex_core

    Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3 (r3_hex_api modules) allows Object Injection, Excessive Allocation. This vulnerability is as…

    erlang hexpm hex hex_core Debian Ubuntu Hex