| Release | Version |
|---|---|
| trixie | 2.0.6-2 |
| forky | 2.5.1-2 |
| sid | 2.5.1-2 |
| Bug | trixie | forky | sid | Description |
|---|---|---|---|---|
| CVE-2026-32148 | vulnerable (no DSA) | fixed | fixed | Insufficient Verification of Data Authenticity vulnerability in hexpm ... |
| CVE-2026-21619 | vulnerable (no DSA) | fixed | fixed | Uncontrolled Resource Consumption, Deserialization of Untrusted Data v ... |