Read the docs

benoitc

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

benoitc records in CISA KEV

No benoitc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hackney 10 records HIGH

Records

10 records in Hackney · all components

TI-2026-34668 CVE-2026-47066 · GHSA-6cp8-v795-jr2j

Infinite loop in Alt-Svc header parser in hackney

Priority HIGH 77

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Allocation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00753 Published 2026-05-25 Fixed in 4.0.1 CWE-835
TI-2026-34674 CVE-2026-47072 · GHSA-f9vr-g2g2-x9fg

CRLF injection in WebSocket upgrade request in hackney

Priority HIGH 70

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Request/Response Splitting.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00542 Published 2026-05-25 Fixed in 4.0.1 CWE-93
TI-2026-34677 CVE-2026-47075 · GHSA-j9wq-vxxc-94wf

CR/LF injection in query parameter in hackney

Priority MEDIUM 63

Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00479 Published 2026-05-25 Fixed in 4.0.1 CWE-93
TI-2026-34671 CVE-2026-47069 · GHSA-mp55-p8c9-rfw2

CRLF injection in cookie domain/path options in hackney

Priority MEDIUM 44

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Response Splitting.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00425 Published 2026-05-25 Fixed in 4.0.1 CWE-93
Open these records in search →