Malicious code in hackney.core.enums (NuGet)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hackney.core.jwt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7449 Malicious code in hackney.core.jwt (NuGet)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7448 Malicious code in hackney.core.enums (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-47073

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:56+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf...

CVE-2026-47067

creationtimestamp| type| source ---|---|--- 2026-06-27 00:35:54+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-9653-rcfr-5c62...

CVE-2026-47069

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:20+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-mp55-p8c9-rfw2...

CVE-2026-47066

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:17+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-6cp8-v795-jr2j...

CVE-2026-47071

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:15+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-gp9c-pm5m-5cxr...

CVE-2026-47070

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:10+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-h73q-4w9q-82h4...

CVE-2026-47075

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:05+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-j9wq-vxxc-94wf...

CVE-2026-47072

creationtimestamp| type| source ---|---|--- 2026-06-26 22:35:02+00:00| published-proof-of-concept| https://github.com/benoitc/hackney/security/advisories/GHSA-f9vr-g2g2-x9fg...

EUVD-2026-31691

Hackney vulnerable to atom-table exhaustion via unrecognized URL schemes...

EUVD-2026-31694

Hackney has unbounded buffer accumulation in WebSocket...

EUVD-2026-31690

Hackney has CRLF / header injection in WebSocket upgrade request...

EUVD-2026-31687

Hackney has CR/LF injection in query parameter...

GHSA-JQ4M-Q6P2-8GWC Hackney: Per-chunk timeout with unbounded body accumulation enables slow-drip OOM

Summary hackneyh3:awaitresponseloop/6 in src/hackneyh3.erl accumulates the HTTP/3 response body in memory without any size cap. The after Timeout clause is a per-message inactivity timer, not a wall-clock deadline: every received streamdata chunk, housekeeping select message, or settings frame...

Hackney: Per-chunk timeout with unbounded body accumulation enables slow-drip OOM

Summary hackneyh3:awaitresponseloop/6 in src/hackneyh3.erl accumulates the HTTP/3 response body in memory without any size cap. The after Timeout clause is a per-message inactivity timer, not a wall-clock deadline: every received streamdata chunk, housekeeping select message, or settings frame...

EUVD-2026-31692

Hackney: Cross-origin Redirect Leaks Authorization, Cookie, and Request Body...

EUVD-2026-31689

Hackney has SSRF allowlist bypass in hackneyurl:normalize/2 via percent-encoded host...