CVE-2026-103502

The hex_core library (versions 0.1.0 before 0.20.0 ) contains an Improper Certificate Validation vulnerability. When using the default HTTP adapter on Erlang/OTP 24 or OTP 25 (specifically when CA certificates cannot be loaded), the library fails to verify server certificates for HTTPS requests. ...