tocsin

Debian/erlang-hex: medium 5.9

Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums. Hex stores checksums for de

Action: Upgrade erlang-hex to 2.4.2-2 or later.

Affected

introducedfixedlast affected
02.4.2-2-

Fixed versions

2.4.2-2

Sources

published · modified · JSON