HE
Product
hex.pm
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 2Low 0
Watch
Add hex.pm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21618 | 6.1 | Jan 19 | Cross-site scripting (XSS) in OAuth Device Authorization screen Affected: 2025-10-01 before 2026-01-19 |
| CVE-2026-21621 | 5.3 | Mar 5 | Improper Scope Enforcement in OAuth client_credentials Flow Allows Read-Only API Key to Escalate to Full Access Affected: 2025-08-18 before 2026-03-05 |
Showing 2