hex_core vulnerabilities (Hex)
5 vulnerabilities.
-
hex_coreHex erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole 5.9 Medium -
hex_coreHex hex_core decompresses registry and Erlang term API responses without size limits 2.1 Low -
hex_coreHex hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25 5.9 Medium -
hex_coreHex Unsafe Deserialization of Erlang Terms in hex_core 2.0 Low -
hex_coreHex Hex authenticity of signed packages not validated 8.8 High