Login Request a demo
HE
Product
hex
by hexpm · last CVE Oct 14, 2026
10
CVEs
0
On KEV
7.5
Max CVSS
8
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 3Medium 4Low 3
Severity
All severities10Critical0High3Medium4Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add hex to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81856
2.3
0%
Oct 12
Terminal escape sequence injection in Hex via unneutralized server-supplied output
Affected: 0.0.1 before 2.5.2; 211303e3f68f5d3ce06450c1ff1a7a770a9ab236 before dd3305ddf0032f6d0b468fd40dbbc3072bfcb8b8
CVE-2026-105274
2.1
0%
Oct 12
hex_core decompresses registry and Erlang term API responses without size limits
Affected: 2.1.0 before 2.5.2; 671f695ac548ed01f5828c2a739ecaa942b21007 before d8b60eee97abb119d525306f048969a217d793a5
CVE-2026-96618
2.1
0%
Oct 12
Hex exhausts memory and disk on oversized or compressed responses from an untrusted mirror
Affected: 0.11.2 before 2.5.2; 51ea632424fb6ea8765148f96dc25dfeb526b1f8
Showing 3