CVE-2026-86698 | hexpm 2026-08-24 OAuth Token Issuance lib/hexpm/oauth/jwt.ex generate_refresh_token session expiration

A vulnerability labeled as problematic has been found in hexpm 2026-08-24. This impacts the function generate_refresh_token of the file lib/hexpm/oauth/jwt.ex of the component OAuth Token Issuance. The manipulation results in session expiration.

This vulnerability is identified as CVE-2026-86698. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More