PT-2026-123303

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Request/Response Splitting' vulnerability in hackney http connect in benoitc hackney allows HTTP Request Splitting via the value a proxy auth fun callback returns. After a 407 response from an HTTP CONNECT proxy, hackney http...