# Hex Advisories.

Every Hex Advisory we hold (Elixir · Erlang), newest first.

## Records, newest first

- [Decompression bomb in ezstd:decompress_using_ddict/2 allows BEAM memory exhaustion via unbounded output buffer](https://agentprime.io/advisories/EEF-CVE-2026-119434.md)
  `EEF-CVE-2026-119434`, `CVE-2026-119434` · Hex `ezstd`: affected `>=1.0.5, <1.2.5`, fixed in `1.2.5` · CVSS 6.9 Medium · Not analysed yet · Published 5 Nov 2026 · Tags: CWE-409
- [Unbounded query cache growth from interpolated JSON paths and splice lists in Ecto](https://agentprime.io/advisories/GHSA-cxjx-vmm2-qr8r.md)
  `GHSA-cxjx-vmm2-qr8r`, `CVE-2026-118391`, `EEF-CVE-2026-118391` · Hex `ecto`: affected `>=3.4.0, <3.14.3`, fixed in `3.14.3` · CVSS 8.9 High · Not analysed yet · Published 4 Nov 2026 · Tags: Denial of service
- [AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password change](https://agentprime.io/advisories/GHSA-j6f8-qcj9-gh4r.md)
  `GHSA-j6f8-qcj9-gh4r`, `CVE-2026-110826`, `EEF-CVE-2026-110826` · Hex `ash_authentication`: affected `>=4.5.0, <4.15.1 || >=5.0.0-rc.0, <5.0.0-rc.16`, fixed in `4.15.1`, `5.0.0-rc.16` · CVSS 6.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-1466
- [AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource](https://agentprime.io/advisories/GHSA-55gf-3263-4r39.md)
  `GHSA-55gf-3263-4r39`, `CVE-2026-118505`, `EEF-CVE-2026-118505` · Hex `ash_authentication`: affected `>=5.0.0-rc.4, <5.0.0-rc.16`, fixed in `5.0.0-rc.16` · CVSS 6.3 Medium · Not analysed yet · Published 3 Nov 2026 · Tags: Authentication bypass
- [AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account](https://agentprime.io/advisories/GHSA-gx67-694c-655c.md)
  `GHSA-gx67-694c-655c`, `CVE-2026-119215`, `EEF-CVE-2026-119215` · Hex `ash_authentication`: affected `>=5.0.0-rc.0, <5.0.0-rc.16`, fixed in `5.0.0-rc.16` · CVSS 7.6 High · Not analysed yet · Published 3 Nov 2026 · Tags: Broken access control
- [jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not](https://agentprime.io/advisories/GHSA-cvmg-hgv6-jqcp.md)
  `GHSA-cvmg-hgv6-jqcp`, `CVE-2026-117680`, `EEF-CVE-2026-117680` · Hex `jsv`: affected `>=0.1.0, <0.26.2`, fixed in `0.26.2` · CVSS 2.1 Low · Not analysed yet · Published 1 Nov 2026 · Tags: CWE-754
- [Unverified Sign in with Apple callback parameter can override verified ID token claims](https://agentprime.io/advisories/GHSA-9fr5-g44g-9526.md)
  `GHSA-9fr5-g44g-9526`, `CVE-2026-117656`, `EEF-CVE-2026-117656` · Hex `assent`: affected `>=0.1.25, <0.3.2`, fixed in `0.3.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Authentication bypass, CWE-349
- [Phoenix.HTML vulnerable to attribute injection via unvalidated attribute names in attributes_escape/1](https://agentprime.io/advisories/EEF-CVE-2026-117645.md)
  `EEF-CVE-2026-117645`, `CVE-2026-117645` · Hex `phoenix_html`: affected `>=1.0.0, <3.3.5 || >=4.0.0, <4.4.0`, fixed in `3.3.5`, `4.4.0` · CVSS 5.3 Medium · Not analysed yet · Published 30 Oct 2026 · Tags: Cross-site scripting (XSS)
- [ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary](https://agentprime.io/advisories/GHSA-7gw2-hphm-c5px.md)
  `GHSA-7gw2-hphm-c5px`, `CVE-2026-117666`, `EEF-CVE-2026-117666` · Hex `ssl_verify_fun`: affected `>=1.0.1, <1.1.8`, fixed in `1.1.8` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Oct 2026 · Tags: Weak cryptography or TLS
- [HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit](https://agentprime.io/advisories/GHSA-pxjf-g536-7r93.md)
  `GHSA-pxjf-g536-7r93`, `CVE-2026-116078`, `EEF-CVE-2026-116078` · Hex `bandit`: affected `>=0.3.1, <1.14.1`, fixed in `1.14.1` · CVSS 8.7 High · Not analysed yet · Published 28 Oct 2026 · Tags: Denial of service
- [Host filesystem path disclosure via DNS rebinding](https://agentprime.io/advisories/EEF-CVE-2026-109823.md)
  `EEF-CVE-2026-109823`, `CVE-2026-109823` · Hex `tidewave`: affected `>=0.8.0, <0.9.2`, fixed in `0.9.2` · CVSS 2.3 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Information disclosure
- [Timing side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose](https://agentprime.io/advisories/GHSA-xvr2-gggj-h2pp.md)
  `GHSA-xvr2-gggj-h2pp`, `CVE-2026-65630`, `EEF-CVE-2026-65630` · Hex `jose`: affected `>=1.10.0, <1.11.13`, fixed in `1.11.13` · CVSS 5.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-208
- [ECDSA signature length is not validated in jose, allowing signature malleability](https://agentprime.io/advisories/GHSA-44hw-rpw9-mwg4.md)
  `GHSA-44hw-rpw9-mwg4`, `CVE-2026-65632`, `EEF-CVE-2026-65632` · Hex `jose`: affected `>=1.0.0, <1.11.13`, fixed in `1.11.13` · CVSS 5.1 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [erlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service](https://agentprime.io/advisories/GHSA-3m45-vrpj-xmrq.md)
  `GHSA-3m45-vrpj-xmrq`, `CVE-2026-65631`, `EEF-CVE-2026-65631` · Hex `jose`: affected `>=1.7.7, <1.11.13`, fixed in `1.11.13` · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [Weak PBKDF2 parameters for password-encrypted private-key export in jose](https://agentprime.io/advisories/GHSA-h4gx-8jq2-mfhc.md)
  `GHSA-h4gx-8jq2-mfhc`, `CVE-2026-65629`, `EEF-CVE-2026-65629` · Hex `jose`: affected `>=1.10.0, <1.11.13`, fixed in `1.11.13` · CVSS 7.4 High · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Infinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types](https://agentprime.io/advisories/GHSA-fpj2-9h59-32pp.md)
  `GHSA-fpj2-9h59-32pp`, `CVE-2026-65628`, `EEF-CVE-2026-65628` · Hex `jose`: affected `>=1.5.0, <1.11.13`, fixed in `1.11.13` · CVSS 5.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [Decompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/2](https://agentprime.io/advisories/GHSA-wfpv-qxp8-x5gm.md)
  `GHSA-wfpv-qxp8-x5gm`, `CVE-2026-65627`, `EEF-CVE-2026-65627` · Hex `jose`: affected `>=1.0.0, <1.11.13`, fixed in `1.11.13` · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-409
- [Bleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose](https://agentprime.io/advisories/GHSA-vwvr-f994-6j9j.md)
  `GHSA-vwvr-f994-6j9j`, `CVE-2026-65626`, `EEF-CVE-2026-65626` · Hex `jose`: affected `>=1.3.0, <1.11.13`, fixed in `1.11.13` · CVSS 5.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Information disclosure
- [Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose](https://agentprime.io/advisories/GHSA-6gxw-6f7r-cjr6.md)
  `GHSA-6gxw-6f7r-cjr6`, `CVE-2026-65625`, `EEF-CVE-2026-65625` · Hex `jose`: affected `>=1.2.0, <1.11.13`, fixed in `1.11.13` · CVSS 5.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-354
- [Unbounded response body buffering and decompression in hackney](https://agentprime.io/advisories/EEF-CVE-2026-97200.md)
  `EEF-CVE-2026-97200`, `CVE-2026-97200` · Hex `hackney`: affected `>=2.0.0-beta.1, <4.9.0`, fixed in `4.9.0` · CVSS 8.2 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service, CWE-409
- [Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney](https://agentprime.io/advisories/EEF-CVE-2026-115693.md)
  `EEF-CVE-2026-115693`, `CVE-2026-115693` · Hex `hackney`: affected `>=1.24.0, <4.9.0`, fixed in `4.9.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney](https://agentprime.io/advisories/EEF-CVE-2026-113440.md)
  `EEF-CVE-2026-113440`, `CVE-2026-113440` · Hex `hackney`: affected `>=2.0.0, <4.9.0`, fixed in `4.9.0` · CVSS 6.0 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Hard-coded credentials
- [SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney](https://agentprime.io/advisories/EEF-CVE-2026-115700.md)
  `EEF-CVE-2026-115700`, `CVE-2026-115700` · Hex `hackney`: affected `>=4.0.1, <4.9.0`, fixed in `4.9.0` · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-436
- [CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney](https://agentprime.io/advisories/EEF-CVE-2026-112880.md)
  `EEF-CVE-2026-112880`, `CVE-2026-112880` · Hex `hackney`: affected `>=2.0.0, <4.9.0`, fixed in `4.9.0` · CVSS 2.1 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Other injection
- [SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit](https://agentprime.io/advisories/GHSA-j363-h72p-296m.md)
  `GHSA-j363-h72p-296m`, `CVE-2026-108529`, `EEF-CVE-2026-108529` · Hex `bandit`: affected `>=0.3.4, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit](https://agentprime.io/advisories/GHSA-47x4-3fxf-82fr.md)
  `GHSA-47x4-3fxf-82fr`, `CVE-2026-110499`, `EEF-CVE-2026-110499` · Hex `bandit`: affected `>=0.3.6, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit](https://agentprime.io/advisories/GHSA-7gfj-7gvq-3xqj.md)
  `GHSA-7gfj-7gvq-3xqj`, `CVE-2026-109584`, `EEF-CVE-2026-109584` · Hex `bandit`: affected `>=0.3.3, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-409
- [HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit](https://agentprime.io/advisories/GHSA-2238-pgfc-w82m.md)
  `GHSA-2238-pgfc-w82m`, `CVE-2026-111103`, `EEF-CVE-2026-111103` · Hex `bandit`: affected `>=1.9.0, <1.14.0`, fixed in `1.14.0` · CVSS 8.2 High · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-460
- [HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit](https://agentprime.io/advisories/GHSA-jwh3-j29h-qfmw.md)
  `GHSA-jwh3-j29h-qfmw`, `CVE-2026-111101`, `EEF-CVE-2026-111101` · Hex `bandit`: affected `>=0.1.0, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [Quadratic bignum parsing of Content-Length and Host port values in Bandit](https://agentprime.io/advisories/GHSA-29cr-8477-rg6r.md)
  `GHSA-29cr-8477-rg6r`, `CVE-2026-113436`, `EEF-CVE-2026-113436` · Hex `bandit`: affected `>=1.0.0-pre.7, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [WebSocket frames keep reaching the WebSock after a server-initiated close in Bandit](https://agentprime.io/advisories/GHSA-2v5v-8f9v-xh85.md)
  `GHSA-2v5v-8f9v-xh85`, `CVE-2026-110314`, `EEF-CVE-2026-110314` · Hex `bandit`: affected `>=0.5.1, <1.14.0`, fixed in `1.14.0` · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: CWE-602
- [WebSocket 1-byte continuation frames bypass \`max_fragmented_message_size\` in Bandit](https://agentprime.io/advisories/GHSA-cpx7-qf6w-jc63.md)
  `GHSA-cpx7-qf6w-jc63`, `CVE-2026-114213`, `EEF-CVE-2026-114213` · Hex `bandit`: affected `>=1.11.0, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit](https://agentprime.io/advisories/GHSA-w5wc-g2hc-g7m2.md)
  `GHSA-w5wc-g2hc-g7m2`, `CVE-2026-114216`, `EEF-CVE-2026-114216` · Hex `bandit`: affected `>=1.12.4, <1.14.0`, fixed in `1.14.0` · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: HTTP request smuggling
- [HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit](https://agentprime.io/advisories/GHSA-p2qv-vx88-385x.md)
  `GHSA-p2qv-vx88-385x`, `CVE-2026-115269`, `EEF-CVE-2026-115269` · Hex `bandit`: affected `>=1.4.0, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit](https://agentprime.io/advisories/GHSA-c3g7-2pg5-qvwh.md)
  `GHSA-c3g7-2pg5-qvwh`, `CVE-2026-108525`, `EEF-CVE-2026-108525` · Hex `bandit`: affected `>=0.3.1, <1.14.0`, fixed in `1.14.0` · CVSS 8.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records](https://agentprime.io/advisories/GHSA-vw7c-67pf-gh96.md)
  `GHSA-vw7c-67pf-gh96`, `CVE-2026-96581`, `EEF-CVE-2026-96581` · Hex `ash`: affected `>=1.22.0, <3.37.2`, fixed in `3.37.2` · CVSS 7.6 High · Not analysed yet · Published 26 Oct 2026 · Tags: Broken access control
- [AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows](https://agentprime.io/advisories/GHSA-gr2r-f49c-9gm2.md)
  `GHSA-gr2r-f49c-9gm2`, `CVE-2026-115627`, `EEF-CVE-2026-115627` · Hex `ash_postgres`: affected `>=0.38.0, <2.15.2`, fixed in `2.15.2` · CVSS 6.0 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Broken access control
- [AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set](https://agentprime.io/advisories/GHSA-36hg-wwp2-fg8w.md)
  `GHSA-36hg-wwp2-fg8w`, `CVE-2026-115635`, `EEF-CVE-2026-115635` · Hex `ash_postgres`: affected `>=2.6.22, <2.15.2`, fixed in `2.15.2` · CVSS 6.0 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Broken access control
- [Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records](https://agentprime.io/advisories/GHSA-g2h4-xp57-q863.md)
  `GHSA-g2h4-xp57-q863`, `CVE-2026-114214`, `EEF-CVE-2026-114214` · Hex `ash`: affected `>=3.24.0, <3.37.1`, fixed in `3.37.1` · CVSS 6.0 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Broken access control
- [WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers](https://agentprime.io/advisories/GHSA-6vww-5m28-f26v.md)
  `GHSA-6vww-5m28-f26v`, `CVE-2026-107685`, `EEF-CVE-2026-107685` · Hex `req_llm`: affected `>=1.9.0, <1.29.0`, fixed in `1.29.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2026 · Tags: Weak cryptography or TLS
- [Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments](https://agentprime.io/advisories/GHSA-ffw9-w85g-f2vh.md)
  `GHSA-ffw9-w85g-f2vh`, `CVE-2026-105963`, `EEF-CVE-2026-105963` · Hex `plug` and 1 more: affected `>=1.6.3, <1.7.0`, fixed in `1.7.0` · CVSS 5.1 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Information disclosure
- [Out-of-bounds write in the Brotli decoder bundled with erl-brotli](https://agentprime.io/advisories/EEF-CVE-2026-111497.md)
  `EEF-CVE-2026-111497` · Hex `brotli`: affected `>=0.3.0, <0.3.4`, fixed in `0.3.4` · CVSS 4.0, no score published · Not analysed yet · Published 22 Oct 2026 · Tags: Memory corruption
- [Unbounded SAML message decompression in esaml allows memory exhaustion](https://agentprime.io/advisories/EEF-CVE-2026-93471.md)
  `EEF-CVE-2026-93471`, `CVE-2026-93471` · Hex `esaml`: affected `>=0.1.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: CWE-409
- [Unbounded atom creation from unsigned LogoutResponse status codes in esaml allows atom table exhaustion](https://agentprime.io/advisories/EEF-CVE-2026-86696.md)
  `EEF-CVE-2026-86696`, `CVE-2026-86696` · Hex `esaml`: affected `>=0.1.0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [Unbounded atom creation while parsing SAML messages in esaml allows atom table exhaustion](https://agentprime.io/advisories/EEF-CVE-2026-105270.md)
  `EEF-CVE-2026-105270`, `CVE-2026-105270` · Hex `esaml`: affected `>=0.1.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Denial of service
- [swoosh has email-derived URL path injection in Microsoft Graph endpoint](https://agentprime.io/advisories/GHSA-754j-98wh-57rf.md)
  `GHSA-754j-98wh-57rf`, `CVE-2026-54893`, `EEF-CVE-2026-54893` · Hex `swoosh`: affected `>=1.12.0, <1.26.3`, fixed in `1.26.3` · CVSS 2.1 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Denial of service, CWE-116, CWE-1284
- [Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit](https://agentprime.io/advisories/GHSA-v53v-9hvg-37jf.md)
  `GHSA-v53v-9hvg-37jf`, `CVE-2026-105660`, `EEF-CVE-2026-105660` · Hex `bandit`: affected `>=0.6.0, <1.13.0`, fixed in `1.13.0` · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: CWE-1286
- [erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole](https://agentprime.io/advisories/GHSA-phm5-m6cj-5382.md)
  `GHSA-phm5-m6cj-5382`, `CVE-2026-96596`, `EEF-CVE-2026-96596` · Hex `hex_core`: affected `>=0.14.0, <0.20.1`, fixed in `0.20.1` · CVSS 5.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit](https://agentprime.io/advisories/GHSA-69m6-wcv4-rwcf.md)
  `GHSA-69m6-wcv4-rwcf`, `CVE-2026-105659`, `EEF-CVE-2026-105659` · Hex `bandit`: affected `>=1.4.0, <1.13.0`, fixed in `1.13.0` · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [hex_core decompresses registry and Erlang term API responses without size limits](https://agentprime.io/advisories/GHSA-7c4r-cgf9-9jmq.md)
  `GHSA-7c4r-cgf9-9jmq`, `CVE-2026-105274`, `EEF-CVE-2026-105274` · Hex `hex_core`: affected `>=0.1.0, <0.20.0`, fixed in `0.20.0` · CVSS 2.1 Low · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-409
- [hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25](https://agentprime.io/advisories/GHSA-p26c-h8c2-rwqj.md)
  `GHSA-p26c-h8c2-rwqj`, `CVE-2026-103502`, `EEF-CVE-2026-103502` · Hex `hex_core`: affected `>=0.1.0, <0.20.0`, fixed in `0.20.0` · CVSS 5.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS, CWE-636
- [Internal error terms inspected into AshTypescript RPC error responses](https://agentprime.io/advisories/GHSA-7gxc-w225-f7f3.md)
  `GHSA-7gxc-w225-f7f3`, `CVE-2026-105283`, `EEF-CVE-2026-105283` · Hex `ash_typescript`: affected `>=0.1.0, <0.19.1`, fixed in `0.19.1` · CVSS 6.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS](https://agentprime.io/advisories/GHSA-6c27-994x-c52f.md)
  `GHSA-6c27-994x-c52f`, `CVE-2026-97853`, `EEF-CVE-2026-97853` · Hex `decimal`: affected `>=0.1.0, <3.1.2`, fixed in `3.1.2` · CVSS 6.9 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Denial of service
- [Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages](https://agentprime.io/advisories/GHSA-m497-c2h9-rvw6.md)
  `GHSA-m497-c2h9-rvw6`, `CVE-2026-104635`, `EEF-CVE-2026-104635` · Hex `protobuf`: affected `>=0.8.0, <0.17.1`, fixed in `0.17.1` · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: Denial of service
- [Ash.count, Ash.exists and Ash.aggregate skip related resources' read policies in filters and sorts](https://agentprime.io/advisories/GHSA-xj24-8f5c-pp5p.md)
  `GHSA-xj24-8f5c-pp5p`, `CVE-2026-101028`, `EEF-CVE-2026-101028` · Hex `ash`: affected `>=2.6.0, <3.34.6`, fixed in `3.34.6` · CVSS 6.0 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Broken access control
- [beam_mcp: JSON boolean and null tool arguments reach dispatch as strings](https://agentprime.io/advisories/GHSA-wv7p-j6qh-3hj4.md)
  `GHSA-wv7p-j6qh-3hj4`, `CVE-2026-104634`, `EEF-CVE-2026-104634` · Hex `beam_mcp`: affected `>=0.1.0, <0.10.1`, fixed in `0.10.1` · CVSS 2.3 Low · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-704
- [beam_mcp: nested tool argument constraints advertised but not enforced](https://agentprime.io/advisories/GHSA-mrg2-4747-fmpw.md)
  `GHSA-mrg2-4747-fmpw`, `CVE-2026-88257`, `EEF-CVE-2026-88257` · Hex `beam_mcp`: affected `>=0.1.0, <0.10.1`, fixed in `0.10.1` · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: CWE-20
- [Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds](https://agentprime.io/advisories/EEF-CVE-2026-94206.md)
  `EEF-CVE-2026-94206`, `CVE-2026-94206` · Hex `cloak` and 1 more: affected `>=0.7.0, <1.0.0-alpha.0`, fixed in `1.0.0-alpha.0` · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Weak cryptography or TLS
- [Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping](https://agentprime.io/advisories/EEF-CVE-2026-95105.md)
  `EEF-CVE-2026-95105`, `CVE-2026-95105` · Hex `cloak`: affected `>=0.1.0-pre`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-649
- [Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash](https://agentprime.io/advisories/EEF-CVE-2026-94201.md)
  `EEF-CVE-2026-94201`, `CVE-2026-94201` · Hex `ash`: affected `>=3.5.1, <3.34.3`, fixed in `3.34.3` · CVSS 8.2 High · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service

Older: <https://agentprime.io/advisories/ecosystem/hex.md?cursor=WyIyMDI2LTEwLTA1VDE5OjE5OjUxLjMyNjAwMFoiLCJFRUYtQ1ZFLTIwMjYtOTQyMDEiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=Hex>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/hex/>. Everything for agents: <https://agentprime.io/llms.txt>.