CVE-2026-96612 - hex
When a developer uses Hex to download code libraries, a malicious library can tell Hex to use a specially crafted name like "../../target". Hex then removes that directory and places the…

Too many irrelevant or confusing CVEs? Use stackflag.com

#hex #hexpm #CVE #infosec

CVE-2026-105668 - hex
In hexpm/hex versions 2.5.0 through 2.5.1, an attacker who controls a package owner account can retire a locked release and cause the safety check that blocks very new versions from being…

Too many irrelevant or confusing CVEs? Use stackflag.com

#hex #hexpm #CVE #infosec