HE
Product
hex
10
CVEs
0
On KEV
7.5
Max CVSS
8
New 30D
Severity mix
Critical 0High 3Medium 4Low 3
Watch
Add hex to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96612 | 7.5 | Oct 12 | Path traversal in Hex via unvalidated dependency app names Affected: 0.6.0 before 2.5.2; 380f87054e1bc08ee13d2b5311bc01f98dad2fc6 |
| CVE-2026-21619 | 7.5 | Feb 27 | Unsafe Deserialization of Erlang Terms in hex_core Affected: 314546ac432229518714cc8e3336e916b9da6305 before 636739f3322514e9303ca335fb630696fcbb3c95; 2.3.0 before 2.3.2 |
| CVE-2026-105668 | 7.1 | Oct 12 | Hex release-age cooldown is lifted package-wide when the locked release is retired Affected: 2.5.0 before 2.5.2; b4e665d46be8a5f81e8cbbe4c3a67058a19cf133 |
Showing 3