# cve.now: Hex packages

The newest entries affecting Hex packages (up to 200). To check exact package versions, use the MCP check_stack tool or /stack.

- [CVE-2026-109823](https://cve.now/CVE-2026-109823.md): Host filesystem path disclosure via DNS rebinding (CVSS 2.3, tidewave-ai tidewave · tidewave)
- [CVE-2026-65630](https://cve.now/CVE-2026-65630.md): Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65632](https://cve.now/CVE-2026-65632.md): ECDSA signature length is not validated in jose, allowing signature malleability (CVSS 5.1, potatosalad jose · jose)
- [CVE-2026-65631](https://cve.now/CVE-2026-65631.md): erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service (CVSS 6.9, potatosalad jose · jose)
- [CVE-2026-65629](https://cve.now/CVE-2026-65629.md): Weak PBKDF2 parameters for password-encrypted private-key export in jose (CVSS 7.4, potatosalad jose · jose)
- [CVE-2026-65628](https://cve.now/CVE-2026-65628.md): Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared\_secret/2 on mismatched key types (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65627](https://cve.now/CVE-2026-65627.md): Decompression bomb via unbounded zlib:inflate in jose\_jwe\_zip:uncompress/2 (CVSS 6.9, potatosalad jose · jose)
- [CVE-2026-65626](https://cve.now/CVE-2026-65626.md): Bleichenbacher padding oracle in RSAES-PKCS1-v1\_5 decryption in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-65625](https://cve.now/CVE-2026-65625.md): Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose (CVSS 5.9, potatosalad jose · jose)
- [CVE-2026-115627](https://cve.now/CVE-2026-115627.md): AshPostgres ignores attribute multitenancy on the join resource when loading many\_to\_many and through relationships, returning records related through other tenants' rows (CVSS 6.0, ash-project ash\_postgres · ash\_postgres)
- [CVE-2026-115635](https://cve.now/CVE-2026-115635.md): AshPostgres returns another tenant's record for a skipped upsert when return\_skipped\_upsert? is set (CVSS 6.0, ash-project ash\_postgres · ash\_postgres)
- [CVE-2026-114214](https://cve.now/CVE-2026-114214.md): Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records (CVSS 6.0, ash-project ash · ash)
- [CVE-2026-107685](https://cve.now/CVE-2026-107685.md): WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers (CVSS 9.1, agentjido req\_llm · req\_llm)
- [CVE-2026-105963](https://cve.now/CVE-2026-105963.md): Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments (CVSS 5.1, elixir-plug plug · elixir-plug plug\_crypto +2)
- [CVE-2026-93471](https://cve.now/CVE-2026-93471.md): Unbounded SAML message decompression in esaml allows memory exhaustion (CVSS 8.7, handnot2 esaml · arekinath esaml +2)
- [CVE-2026-86696](https://cve.now/CVE-2026-86696.md): Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion (CVSS 8.2, handnot2 esaml · arekinath esaml +2)
- [CVE-2026-105270](https://cve.now/CVE-2026-105270.md): Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion (CVSS 8.7, arekinath esaml · handnot2 esaml +2)
- [CVE-2026-105660](https://cve.now/CVE-2026-105660.md): Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit (CVSS 6.9, mtrudel bandit · bandit)
- [CVE-2026-96596](https://cve.now/CVE-2026-96596.md): erl\_tar:extract/2 loops forever on a GNU sparse member with a trailing hole (CVSS 5.9, erlang rebar3 · hexpm hex\_core +3)
- [CVE-2026-105659](https://cve.now/CVE-2026-105659.md): HTTP/2 blocked-send deadlines reset on every WINDOW\_UPDATE, letting a trickle pin stream processes indefinitely in Bandit (CVSS 8.7, mtrudel bandit · bandit)
- [CVE-2026-105274](https://cve.now/CVE-2026-105274.md): hex\_core decompresses registry and Erlang term API responses without size limits (CVSS 2.1, erlang rebar3 · hexpm hex\_core +2)
- [CVE-2026-103502](https://cve.now/CVE-2026-103502.md): hex\_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25 (CVSS 5.9, hexpm hex\_core · hex\_core)
- [CVE-2026-105283](https://cve.now/CVE-2026-105283.md): Internal error terms inspected into AshTypescript RPC error responses (CVSS 6.3, ash-project ash\_typescript · ash\_typescript)
- [CVE-2026-97853](https://cve.now/CVE-2026-97853.md): Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS (CVSS 6.9, ericmj decimal · decimal)
- [CVE-2026-104635](https://cve.now/CVE-2026-104635.md): Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages (CVSS 8.2, elixir-protobuf protobuf · protobuf)
- [CVE-2026-101028](https://cve.now/CVE-2026-101028.md): Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts (CVSS 6.0, ash-project ash · ash)
- [CVE-2026-104634](https://cve.now/CVE-2026-104634.md): beam\_mcp: JSON boolean and null tool arguments reach dispatch as strings (CVSS 2.3, ScriptKittyOS beam\_mcp · beam\_mcp)
- [CVE-2026-88257](https://cve.now/CVE-2026-88257.md): beam\_mcp: nested tool argument constraints advertised but not enforced (CVSS 5.3, ScriptKittyOS beam\_mcp · beam\_mcp)
- [CVE-2026-94206](https://cve.now/CVE-2026-94206.md): Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds (CVSS 6.3, danielberkompas cloak\_ecto · danielberkompas cloak +2)
- [CVE-2026-95105](https://cve.now/CVE-2026-95105.md): Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping (CVSS 8.2, danielberkompas cloak · cloak)
- [CVE-2026-94201](https://cve.now/CVE-2026-94201.md): Filtering an :atom attribute with unsafe\_to\_atom? can exhaust the BEAM atom table in Ash (CVSS 8.2, ash-project ash · ash)
- [CVE-2026-94194](https://cve.now/CVE-2026-94194.md): Mint HTTP/1 client applies chunked framing when chunked is not the final transfer coding, enabling response smuggling through intermediaries (CVSS 6.3, elixir-mint mint · mint)
- [CVE-2026-92103](https://cve.now/CVE-2026-92103.md): Mint HTTP/2 client buffers oversized frames up to 16 MiB before enforcing max\_frame\_size (CVSS 6.3, elixir-mint mint · mint)
- [CVE-2026-91043](https://cve.now/CVE-2026-91043.md): HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max\_header\_list\_size and exhaust client memory (CVSS 8.2, elixir-mint mint · mint)
- [CVE-2026-92106](https://cve.now/CVE-2026-92106.md): lazy\_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS (CVSS 2.3, dashbitco lazy\_html · lazy\_html)
- [CVE-2026-93477](https://cve.now/CVE-2026-93477.md): Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash (CVSS 5.9, ash-project ash · ash)
- [CVE-2026-91187](https://cve.now/CVE-2026-91187.md): Improper Verification of Cryptographic Signature in dashbit nimble\_zta Cloudflare strategy (CVSS 9.3, dashbit nimble\_zta · nimble\_zta)
- [CVE-2026-82723](https://cve.now/CVE-2026-82723.md): Actor record with password digest stored in AshAuthentication audit log entries (CVSS 1.8, team-alembic ash\_authentication · ash\_authentication)
- [CVE-2026-56813](https://cve.now/CVE-2026-56813.md): Cookie attribute injection in Plug.Conn.Cookies.encode/2 (CVSS 2.1, elixir-plug plug · plug)
- [CVE-2026-56814](https://cve.now/CVE-2026-56814.md): Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service) (CVSS 6.9, elixir-plug plug · plug)
- [CVE-2026-56812](https://cve.now/CVE-2026-56812.md): Phoenix JavaScript presence client crashes on presence keys colliding with Object.prototype members in Presence.syncState/syncDiff (CVSS 6.3, phoenixframework phoenix · phoenix)
- [CVE-2026-56811](https://cve.now/CVE-2026-56811.md): Phoenix transports do not limit channel joins per connection, enabling process-exhaustion denial of service (CVSS 8.7, phoenixframework phoenix · phoenix)
- [CVE-2026-54893](https://cve.now/CVE-2026-54893.md): Email-derived URL path injection in the Swoosh Microsoft Graph adapter (CVSS 2.1, swoosh)
- [CVE-2026-48853](https://cve.now/CVE-2026-48853.md): Remote code execution and denial of service via unsafe Erlang term deserialization in elixir-grpc/grpc (CVSS 9.2, elixir-grpc grpc · grpc)
- [CVE-2026-48599](https://cve.now/CVE-2026-48599.md): Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding (CVSS 7.6, elixir-grpc grpc · grpc)
- [CVE-2026-48854](https://cve.now/CVE-2026-48854.md): Unbounded request body accumulation causes memory exhaustion in elixir-grpc/grpc (CVSS 8.7, elixir-grpc grpc · grpc)
- [CVE-2026-43966](https://cve.now/CVE-2026-43966.md): HTTP Response Splitting via Non-VCHAR Bytes in cow\_http\_struct\_hd:escape\_string/2 (CVSS 6.3, ninenines cowlib · cowlib +2)
- [CVE-2026-48596](https://cve.now/CVE-2026-48596.md): CRLF injection in Tesla.Multipart.add\_content\_type\_param/2 allows HTTP header injection (CVSS 2.1, elixir-tesla tesla · tesla)
- [CVE-2026-48594](https://cve.now/CVE-2026-48594.md): Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression (CVSS 8.2, elixir-tesla tesla · tesla)
- [CVE-2026-48595](https://cve.now/CVE-2026-48595.md): Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects (CVSS 8.2, elixir-tesla tesla · tesla)
- [CVE-2026-48597](https://cve.now/CVE-2026-48597.md): Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint (CVSS 8.2, elixir-tesla tesla · tesla)
- [CVE-2026-48598](https://cve.now/CVE-2026-48598.md): CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection (CVSS 2.1, elixir-tesla tesla · tesla)
- [CVE-2026-43969](https://cve.now/CVE-2026-43969.md): Cookie Request Header Injection via Unvalidated Encoder in cow\_cookie:cookie/1 (CVSS 2.1, ninenines cowlib · cowlib)
- [CVE-2025-68113](https://cve.now/CVE-2025-68113.md): ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay (CVSS 6.5, altcha-org altcha-lib · altcha-lib +4)
- [CVE-2021-46871](https://cve.now/CVE-2021-46871.md): tag.ex in Phoenix Phoenix.HTML (aka phoenix\_html) before 3.0.4 allows XSS in HEEx class attributes. (CVSS 6.1, phoenix\_html)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/ecosystem/hex
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.