Security
فارسی
All products

hackney

Hex · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Hackney: Per-chunk timeout with unbounded body accumulation enables slow-drip OOMCVE-2026-47077 · GHSA-JQ4M-Q6P2-8GWC hackney Hex High Fix reported
Hackney vulnerable to atom-table exhaustion via unrecognized URL schemesCVE-2026-47067 · GHSA-9653-RCFR-5C62 hackney Hex High Fix reported
Hackney has unbounded buffer accumulation in WebSocketCVE-2026-47073 · GHSA-Q8JG-FGJ4-FPHF hackney Hex High Fix reported
Hackney has CRLF / header injection in WebSocket upgrade requestCVE-2026-47072 · GHSA-F9VR-G2G2-X9FG hackney Hex Medium Fix reported
Hackney has CR/LF injection in query parameterCVE-2026-47075 · GHSA-J9WQ-VXXC-94WF hackney Hex Medium Fix reported
Hackney: Cross-origin Redirect Leaks Authorization, Cookie, and Request BodyCVE-2026-47070 · GHSA-H73Q-4W9Q-82H4 hackney Hex Medium Fix reported
Hackney has SSRF allowlist bypass in hackney_url:normalize/2 via percent-encoded hostCVE-2026-47076 · GHSA-PJ7V-XFVX-WMJQ hackney Hex Medium Fix reported
Hackney: `ssl:connect/2` post-handshake upgrade has no timeoutCVE-2026-47071 · GHSA-GP9C-PM5M-5CXR hackney Hex High Fix reported
Hackney has an infinite loop on non-token byte at start of an Alt-Svc entryCVE-2026-47066 · GHSA-6CP8-V795-JR2J hackney Hex High Fix reported
Hackney has CRLF / header injection via unvalidated `domain` and `path` optionsCVE-2026-47069 · GHSA-MP55-P8C9-RFW2 hackney Hex Low Fix reported
Hackney fails to properly release HTTP connections to the poolCVE-2025-3864 · GHSA-9FM9-HP7P-53MF hackney Hex Low Fix reported
Server-side Request Forgery (SSRF) in hackneyCVE-2025-1211 · GHSA-VQ52-99R9-H5PW hackney Hex Low Fix reported