← All credits

Eric Meadows-Jönsson / Hex.pm

7 vulnerability records and advisories credit this contributor.

Path Traversal in Local File Store Backend

Denial of Service via Oversized Package Upload

Unbounded exponent in decimal enables unauthenticated DoS

Cross-site scripting (XSS) in OAuth Device Authorization screen

Unsafe Deserialization of Erlang Terms in hex_core

Lockfile checksums not verified in Hex allows dependency integrity bypass

Password Reset Tokens Do Not Expire