CVE-2026-32148: Hex Silent Checksum Bypasscve-2026-32148-hex-silent-checksum-bypass
When a dynamically generated atom (`String.to_atom/1`) is pinned in a pattern match inside a `case` statement, matching against structures with strings causes silent fall-through to the catch-all branch. In contexts like package resolution, this can silently bypass dependency signature and checksum evaluations, allowing tampered packages to be installed and
