Debian/erlang-hex: unknown
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine running mix deps.get,
Action: Upgrade erlang-hex to 2.5.3-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.3-2 | - |
Fixed versions
| 2.5.3-2 |
Sources
- osv: DEBIAN-CVE-2026-96618#Debian:14/erlang-hex
- https://security-tracker.debian.org/tracker/CVE-2026-96618
published · modified · JSON