PT-2026-110651

Name of the Vulnerable Software and Affected Versions hex versions 0.6.0 through 2.5.1 Description A path traversal issue exists where a malicious package publisher can delete a directory outside the project's deps directory and extract package files into it when a developer fetches dependencies...