Skip to content
Benoitc Hackney vulnerabilities
-
benoitc hackney
Unbounded response body buffering and decompression in hackney
CVE-2026-97200
Fix available
8.2 High
-
benoitc hackney
Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
CVE-2026-115693
Fix available
9.1 Critical
-
benoitc hackney
HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney
CVE-2026-113440
Fix available
6.0 Medium
-
benoitc hackney
SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney
CVE-2026-115700
Fix available
6.9 Medium
-
benoitc hackney
CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney
CVE-2026-112880
Fix available
2.1 Low
-
benoitc hackney
Unbounded memory consumption in WebSocket client in hackney
CVE-2026-47073
Fix available
8.7 High
-
benoitc hackney
Atom table exhaustion via unrecognized URL schemes in hackney
CVE-2026-47067
Fix available
8.7 High
-
benoitc hackney
CRLF injection in WebSocket upgrade request in hackney
CVE-2026-47072
Fix available
6.9 Medium
-
benoitc hackney
SSRF allowlist bypass via percent-encoded host in hackney
CVE-2026-47076
Fix available
6.9 Medium
-
benoitc hackney
HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney
CVE-2026-47070
Fix available
6.0 Medium
-
benoitc hackney
CR/LF injection in query parameter in hackney
CVE-2026-47075
Fix available
6.8 Medium
-
benoitc hackney
Unbounded body accumulation in HTTP/3 response loop in hackney
CVE-2026-47077
Fix available
8.2 High
-
benoitc hackney
SOCKS5 TLS upgrade ignores caller timeout in hackney
CVE-2026-47071
Fix available
8.2 High
-
benoitc hackney
CRLF injection in cookie domain/path options in hackney
CVE-2026-47069
Fix available
2.1 Low
-
benoitc hackney
Infinite loop in Alt-Svc header parser in hackney
CVE-2026-47066
Fix available
8.7 High