Vulnerabilities > HEX > HEX Core > 0.1.1

DATE CVE VULNERABILITY TITLE RISK
2019-02-04 CVE-2019-1000013 Improper Input Validation vulnerability in HEX Core
Hex package manager hex_core version 0.3.0 and earlier contains a Signing oracle vulnerability in Package registry verification that can result in Package modifications not detected, allowing code execution.
network
hex CWE-20
6.8