Skip to content
OpenAdvisories

Package · Ubuntu

erlang-hex

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-105274

    hex_core decompresses registry and Erlang term API responses without size limits

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API requests, to exhaust the memory of the Erlang VM running hex_core. The same code is ve…

    Erlang Project hexpm hex hex_core Debian Ubuntu Hex
  • Low 2.3
    CVE-2026-81856

    Terminal escape sequence injection in Hex via unneutralized server-supplied output

    Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix tasks. Hex prints strings supplied by the …

    hexpm hex erlang-hex erlang-hex Debian Ubuntu