Vulnerabilities > HEX
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-02-04 | CVE-2019-1000013 | Insufficient Verification of Data Authenticity vulnerability in HEX Core Hex package manager hex_core version 0.3.0 and earlier contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. | 8.8 |
| 2019-02-04 | CVE-2019-1000012 | Insufficient Verification of Data Authenticity vulnerability in HEX Hex package manager version 0.14.0 through 0.18.2 contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution. | 8.8 |