Bbenoitc

Products

Exploited and recent CVEs

• CVE-2026-97200 High 8.2 Unbounded response body buffering and decompression in hackney 0.6%
• CVE-2026-115693 Critical 9.1 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney 0.3%
• CVE-2026-113440 Medium 6.0 HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackney 0.3%
• CVE-2026-115700 Medium 6.9 SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney 0.1%
• CVE-2026-112880 Low 2.1 CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney 0.2%
• CVE-2026-49457 Critical 9.1 QUIC has Broken TLS verification 0.2%
• CVE-2026-47073 High 8.7 Unbounded memory consumption in WebSocket client in hackney 0.9%
• CVE-2026-47067 High 8.7 Atom table exhaustion via unrecognized URL schemes in hackney 0.8%
• CVE-2026-47072 Medium 6.9 CRLF injection in WebSocket upgrade request in hackney 0.5%
• CVE-2026-47076 Medium 6.9 SSRF allowlist bypass via percent-encoded host in hackney 0.2%
• CVE-2026-47070 Medium 6.0 HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney 0.4%
• CVE-2026-47075 Medium 6.8 CR/LF injection in query parameter in hackney 0.5%
• CVE-2026-47077 High 8.2 Unbounded body accumulation in HTTP/3 response loop in hackney 0.7%
• CVE-2026-47071 High 8.2 SOCKS5 TLS upgrade ignores caller timeout in hackney 0.8%
• CVE-2026-47066 High 8.7 Infinite loop in Alt-Svc header parser in hackney 0.8%
• CVE-2026-47069 Low 2.1 CRLF injection in cookie domain/path options in hackney 0.4%
• CVE-2024-6827 High 7.5 HTTP Request Smuggling in benoitc/gunicorn 0.8%
• CVE-2024-1135 High 7.5 HTTP Request Smuggling in benoitc/gunicorn 3.0%