hackney vulnerabilities (Hex)
17 vulnerabilities.
-
hackneyHex Unbounded response body buffering and decompression in hackney 8.2 High -
hackneyHex Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney 9.1 Critical -
hackneyHex HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney 6.0 Medium -
hackneyHex SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney 6.9 Medium -
hackneyHex CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney 2.1 Low -
hackneyHex Unbounded memory consumption in WebSocket client in hackney 8.7 High -
hackneyHex Atom table exhaustion via unrecognized URL schemes in hackney 8.7 High -
hackneyHex CRLF injection in WebSocket upgrade request in hackney 6.9 Medium -
hackneyHex SSRF allowlist bypass via percent-encoded host in hackney 6.9 Medium -
hackneyHex HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney 6.0 Medium -
hackneyHex CR/LF injection in query parameter in hackney 6.8 Medium -
hackneyHex Unbounded body accumulation in HTTP/3 response loop in hackney 8.2 High -
hackneyHex SOCKS5 TLS upgrade ignores caller timeout in hackney 8.2 High -
hackneyHex CRLF injection in cookie domain/path options in hackney 2.1 Low -
hackneyHex Infinite loop in Alt-Svc header parser in hackney 8.7 High -
hackneyHex Connection pool exhaustion in hackney 2.3 Low -
hackneyHex Server-side Request Forgery (SSRF) in hackney 6.3 Medium