— Hex
EEF-CVE-2026-47066 · CVE-2026-47066, GHSA-6cp8-v795-jr2j Infinite loop in Alt-Svc header parser in hackney
Modified: 5/27/2026
package
Hex / hackney
pkg:hex/hackney
— Hex
EEF-CVE-2026-47067 · CVE-2026-47067, GHSA-9653-rcfr-5c62 Atom table exhaustion via unrecognized URL schemes in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47069 · CVE-2026-47069, GHSA-mp55-p8c9-rfw2 CRLF injection in cookie domain/path options in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47070 · CVE-2026-47070, GHSA-h73q-4w9q-82h4 HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47071 · CVE-2026-47071, GHSA-gp9c-pm5m-5cxr SOCKS5 TLS upgrade ignores caller timeout in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47072 · CVE-2026-47072, GHSA-f9vr-g2g2-x9fg CRLF injection in WebSocket upgrade request in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47073 · CVE-2026-47073, GHSA-q8jg-fgj4-fphf Unbounded memory consumption in WebSocket client in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47075 · CVE-2026-47075, GHSA-j9wq-vxxc-94wf CR/LF injection in query parameter in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47076 · CVE-2026-47076, GHSA-pj7v-xfvx-wmjq SSRF allowlist bypass via percent-encoded host in hackney
Modified: 5/27/2026
— Hex
EEF-CVE-2026-47077 · CVE-2026-47077, GHSA-jq4m-q6p2-8gwc Unbounded body accumulation in HTTP/3 response loop in hackney
Modified: 5/27/2026
LOW Hex
GHSA-9fm9-hp7p-53mf · CVE-2025-3864 Hackney fails to properly release HTTP connections to the pool
Modified: 2/3/2026
MEDIUM 6.5 Hex
GHSA-vq52-99r9-h5pw · CVE-2025-1211 Server-side Request Forgery (SSRF) in hackney
Modified: 12/10/2025