CVE-2026-103503 | hexpm Hex 2.4.2 Hex.HTTP.SSL.ssl_opts/Hex.HTTP.SSL.partial_chain cacerts_path certificate validation

SecurityVulns
Yanac

A vulnerability identified as problematic has been detected in hexpm Hex 2.4.2. Impacted is the function Hex.HTTP.SSL.ssl_opts/Hex.HTTP.SSL.partial_chain. This manipulation of the argument cacerts_path causes improper certificate validation.

This vulnerability is handled as CVE-2026-103503. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More