PT-2026-110632

Name of the Vulnerable Software and Affected Versions hexpm hex versions 0.20.2 through 2.5.1 Description Improper validation of integrity check values allows a package mirror to substitute a tarball when using the mix hex.package fetch PACKAGE VERSION --output - command. Hex typically compares a...