CVE-2026-21619

CVE-2026-21619 affects Hex ecosystem: hex_core (src/hex_api.erl), hex (src/mix_hex_api.erl), and rebar3 (apps/rebar/src/vendored/r3_hex_api.erl). The issue is an Uncontrolled Resource Consumption and Deserialization of Untrusted Data that allows Object Injection and excessive allocation via hex_c...