hpax has 1 known vulnerabilities on the latest version (1.0.4). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of hpax?

The latest version of hpax is 1.0.4, released 2026-07-05.

Does hpax have known vulnerabilities?

Yes. hpax has 1 known vulnerabilities. See depscope.dev/pkg/hex/hpax for details.

No, hpax is actively maintained. Latest release: 1.0.4 (2026-07-05).

What are alternatives to hpax?

DepScope has no curated alternatives for hpax at this time.

What license does hpax use?

hpax is licensed under Apache-2.0.

hpax

hexv1.0.4

Implementation of the HPACK protocol (RFC 7541) for Elixir

License Apache-2.0permissive9 versions2 maintainers0 deps435,978 weekly dl

elixir-mint/hpax

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Update to >= 1ba4bb2dc91e80089cf89c73970ac3ded76f17eb to fix known vulnerabilities

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

20/25

security

9/15

maturity

3/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2026-58226	Unauthenticated denial-of-service via unbounded HPACK integer decoding in hpax	1ba4bb2dc91e80089cf89c73970ac3ded76f17eb

Maintainer trust

Active maintainers (3m)

1

Contributors (12m)

2

Primary author dominance

50%

GitHub stars

26

single active maintainer 3m

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/hex/hpax

First published · 2021-09-22T06:32:17.463763Z

Last updated · 2026-07-05T16:11:14.826644Z