Login Request a demo
HE
Product
hexpm
by hexpm · last CVE Sep 22, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 3Low 2
Severity
All severities8Critical1High2Medium3Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add hexpm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86698
2.3
0%
Sep 22
Refresh tokens accepted as private repository credentials at the CDN
Affected: 2025-10-10 before 2026-09-22; 650faa03af511e74c1b3b49ec12d35666b6984c4 before db58cf3a86c7639708ef52ff86de0b4f938e6360
CVE-2026-75554
2.3
0%
Aug 24
Explicit organization scopes survive token refresh after membership ends
Affected: 2025-10-10 before 2026-08-24; 650faa03af511e74c1b3b49ec12d35666b6984c4 before 50cffd206490c49c92d7b63c8505949682abedb0
Showing 2