Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/01 1:25 a.m.15 views

hex_core has Unsafe Deserialization of Erlang Terms

Impact The Hex client hexcore deserializes Erlang terms received from the Hex API using binarytoterm/1 without sufficient restrictions. If an attacker can control the HTTP response body returned by the Hex API, this allows denial-of-service attacks such as atom table exhaustion, leading to a VM...

7.5CVSS6.2AI score0.00576EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder