| Bug | trixie | forky | sid | Description |
|---|
| CVE-2026-105280 | vulnerable (no DSA) | fixed | fixed | Improper Validation of Integrity Check Value vulnerability in hexpm he ... |
| CVE-2026-103503 | vulnerable (no DSA) | fixed | fixed | Improper Certificate Validation vulnerability in hexpm hex allows an a ... |
| CVE-2026-96618 | vulnerable (no DSA) | fixed | fixed | Improper Handling of Highly Compressed Data (Data Amplification) vulne ... |
| CVE-2026-96612 | vulnerable (no DSA) | fixed | fixed | Improper Limitation of a Pathname to a Restricted Directory ('Path Tra ... |
| CVE-2026-81856 | vulnerable (no DSA) | fixed | fixed | Improper Neutralization of Escape, Meta, or Control Sequences vulnerab ... |
| CVE-2026-32148 | vulnerable (no DSA) | fixed | fixed | Insufficient Verification of Data Authenticity vulnerability in hexpm ... |
| CVE-2026-21619 | vulnerable (no DSA) | fixed | fixed | Uncontrolled Resource Consumption, Deserialization of Untrusted Data v ... |