What’s Vulnerable › Products

benoitc hackney vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your benoitc hackney version is affected

Latest benoitc hackney vulnerabilities

• CVE-2026-97200 — Unbounded response body buffering and decompression in hackney (CVSS 8.2)
• CVE-2026-115700 — SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney (CVSS 6.9)
• CVE-2026-115693 — Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney (CVSS 9.1)
• CVE-2026-113440 — HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney (CVSS 6.0)
• CVE-2026-112880 — CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney (CVSS 2.1)
• CVE-2026-47077 — Unbounded body accumulation in HTTP/3 response loop in hackney (CVSS 7.5)
• CVE-2026-47076 — SSRF allowlist bypass via percent-encoded host in hackney (CVSS 6.5)
• CVE-2026-47075 — CR/LF injection in query parameter in hackney (CVSS 7.5)
• CVE-2026-47073 — Unbounded memory consumption in WebSocket client in hackney (CVSS 7.5)
• CVE-2026-47072 — CRLF injection in WebSocket upgrade request in hackney (CVSS 7.5)
• CVE-2026-47071 — SOCKS5 TLS upgrade ignores caller timeout in hackney (CVSS 7.5)
• CVE-2026-47070 — HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney (CVSS 6.1)
• CVE-2026-47069 — CRLF injection in cookie domain/path options in hackney (CVSS 5.3)
• CVE-2026-47067 — Atom table exhaustion via unrecognized URL schemes in hackney (CVSS 7.5)
• CVE-2026-47066 — Infinite loop in Alt-Svc header parser in hackney (CVSS 7.5)