hexpm Hex.pm Vulnerabilities

Hexpm Hex.pm vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

13 March 2026

Uncontrolled Resource Consumption in Hex.pm Affects Hexpm Packages
CVE-2026-23940
HexpmHexpm7.1HIGH

5 March 2026

Insufficient Session Expiration in HexPM Affects User Account Security
CVE-2026-21622
HexpmHexpm9.5CRITICAL
Improper Authorization in Hexpm API Leading to Privilege Escalation
CVE-2026-21621
HexpmHexpm7HIGH

19 January 2026

XSS Vulnerability in Hexpm Product by Hexpm
CVE-2026-21618
HexpmHexpm8.5HIGH