BE
Vendor
benoitc
16
CVEs
0
On KEV
5
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97200 New | HA hackney benoitc | 8.2 | Oct 26 | Unbounded response body buffering and decompression in hackney |
| CVE-2026-115693 New | HA hackney benoitc | 9.1 | Oct 26 | Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney |
| CVE-2026-113440 New | HA hackney benoitc | 6.0 | Oct 26 | HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney |
| CVE-2026-115700 New | HA hackney benoitc | 6.9 | Oct 26 | SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney |
| CVE-2026-112880 New | HA hackney benoitc | 2.1 | Oct 26 | CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney |
| CVE-2026-49457 | ER erlang_quic benoitc | 9.1 | Aug 14 | QUIC has Broken TLS verification |
| CVE-2026-47073 | HA hackney benoitc | 7.5 | May 25 | Unbounded memory consumption in WebSocket client in hackney |
| CVE-2026-47067 | HA hackney benoitc | 7.5 | May 25 | Atom table exhaustion via unrecognized URL schemes in hackney |
| CVE-2026-47072 | HA hackney benoitc | 7.5 | May 25 | CRLF injection in WebSocket upgrade request in hackney |
| CVE-2026-47076 | HA hackney benoitc | 6.5 | May 25 | SSRF allowlist bypass via percent-encoded host in hackney |
| CVE-2026-47070 | HA hackney benoitc | 6.1 | May 25 | HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney |
| CVE-2026-47075 | HA hackney benoitc | 7.5 | May 25 | CR/LF injection in query parameter in hackney |
| CVE-2026-47077 | HA hackney benoitc | 7.5 | May 25 | Unbounded body accumulation in HTTP/3 response loop in hackney |
| CVE-2026-47071 | HA hackney benoitc | 7.5 | May 25 | SOCKS5 TLS upgrade ignores caller timeout in hackney |
| CVE-2026-47066 | HA hackney benoitc | 7.5 | May 25 | Infinite loop in Alt-Svc header parser in hackney |
| CVE-2026-47069 | HA hackney benoitc | 5.3 | May 25 | CRLF injection in cookie domain/path options in hackney |