Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Hex Subscribe
Filtered by product Hex Core
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-1000013 1 Hex 1 Hex Core 2021-07-21 6.8 MEDIUM 8.8 HIGH
Hex package manager hex_core version 0.3.0 and earlier contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. This attack appears to be exploitable via victim fetches packages from malicious/compromised mirror. This vulnerability appears to have been fixed in 0.4.0.