Skip to content
OpenAdvisories

Package · Hex

hex_core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-96596

    erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

    Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (r3_hex_erl_tar module) allows an attacker who supplies a tar…

    erlang hexpm OTP hex Debian Ubuntu Hex
  • Medium 5.9
    CVE-2026-103502

    hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25

    Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository or API server to programs that use hex_core's default HTTP adapter on Erlang/OTP …

    hexpm hex_core erlang-hex erlang-hex Debian Ubuntu Hex