Debian/erlang-hex: medium 5.9

Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums. Hex stores checksums for de

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: DEBIAN-CVE-2026-32148
• https://security-tracker.debian.org/tracker/CVE-2026-32148

published 2026-04-30T19:16:09Z · modified 2026-10-27T10:00:33.825711416Z · JSON