Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hex Subscribe
Filtered by product Hex
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-1000012 1 Hex 1 Hex 2021-07-21 6.8 MEDIUM 8.8 HIGH
Hex package manager version 0.14.0 through 0.18.2 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via victim fetches packages from malicious/compromised mirror. This vulnerability appears to have been fixed in 0.19.