CNNVD-202601-3056 Information

CNNVD ID

CNNVD-202601-3056

CVE-2026-21618

  • CNNVD Published: 2026-01-19

Description (Chinese)

Hexpm是Hex开源的一个Web页面和接口。 Hexpm存在安全漏洞,该漏洞源于输入中和不当,可能导致跨站脚本攻击。

Description (English)

Hexpm is a Web page and interface for Hex open source. Hexpm has a security loophole, which stems from inappropriate input and could lead to a cross-site script attack.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Hex

Published

2026-01-19

Last Modified

2026-02-24

References

https://github.com/hexpm/hexpm/commit/c692438684ead90c3bcbfb9ccf4e63c768c668a8 https://github.com/hexpm/hexpm/security/advisories/GHSA-6cw9-5gg4-rhpj

Patch

https://github.com/hexpm/hexpm

Share on: