Skip to content
OpenAdvisories

Package · Ubuntu

rebar3

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-103502

    hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25

    Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository or API server to programs that use hex_core's default HTTP adapter on Erlang/OTP …

    hexpm hex_core erlang-hex erlang-hex Debian Ubuntu Hex