Hex Package Vulnerabilities

All 98 Elixir / Erlang packages with known CVEs, ranked by live CVE volume — 352 package-to-CVE mappings with affected ranges and fixed versions. Updated continuously as new vulnerabilities publish.

  1. 1.ash31 CVEs
  2. 2.bandit24 CVEs
  3. 3.ash_authentication21 CVEs
  4. 4.hackney18 CVEs
  5. 5.mint14 CVEs
  6. 6.mpp13 CVEs
  7. 7.jose9 CVEs
  8. 8.ash_typescript8 CVEs
  9. 9.plug8 CVEs
  10. 10.ash_admin7 CVEs
  11. 11.ash_ai7 CVEs
  12. 12.cowlib7 CVEs
  13. 13.ash_authentication_oauth2_server6 CVEs
  14. 14.ash_graphql6 CVEs
  15. 15.html_sanitize_ex6 CVEs
  16. 16.livebook6 CVEs
  17. 17.mdex6 CVEs
  18. 18.ash_sql5 CVEs
  19. 19.hex_core5 CVEs
  20. 20.phoenix5 CVEs
  21. 21.tesla5 CVEs
  22. 22.ash_phoenix4 CVEs
  23. 23.ash_postgres4 CVEs
  24. 24.esaml4 CVEs
  25. 25.grpc4 CVEs
  26. 26.guardian4 CVEs
  27. 27.gun4 CVEs
  28. 28.mdex_native4 CVEs
  29. 29.rabbit_common4 CVEs
  30. 30.ash_authentication_phoenix3 CVEs
  31. 31.ash_paper_trail3 CVEs
  32. 32.boruta3 CVEs
  33. 33.cowboy3 CVEs
  34. 34.ewe3 CVEs
  35. 35.phoenix_storybook3 CVEs
  36. 36.postgrex3 CVEs
  37. 37.xml_builder3 CVEs
  38. 38.absinthe2 CVEs
  39. 39.ash_cloak2 CVEs
  40. 40.ash_lua2 CVEs
  41. 41.ash_oban2 CVEs
  42. 42.beam_mcp2 CVEs
  43. 43.cloak2 CVEs
  44. 44.decimal2 CVEs
  45. 45.oban_web2 CVEs
  46. 46.oidcc2 CVEs
  47. 47.oidcc_plug2 CVEs
  48. 48.phoenix_html2 CVEs
  49. 49.phoenix_live_view2 CVEs
  50. 50.pow2 CVEs

Which Hex packages run in YOUR stack?

EchelonGraph inventories your dependencies and correlates them against live CVE intelligence — affected ranges, fixed versions, and blast radius in one graph.

Book a Demo →