CVE-2026-97200

Allocation of Resources Without Limits or Throttling vulnerability in hackneyconn in benoitc hackney allows a malicious HTTP server to exhaust client memory via an oversized or highly compressed response body. hackney:request/5 and hackney:body/1 return the whole response body, and nothing bounds...

CVE-2026-97200

The benoitc hackney library (versions 2.0.0-beta.1 to 4.8.4 ) is vulnerable to an Allocation of Resources Without Limits or Throttling (CWE-409, CWE-770) flaw in the hackney_conn component. The issue stems from unbounded accumulation in hackney_conn:read_full_body/2 and the HTTP/2 and HTTP/3 accu...

CVE-2026-97200 Unbounded response body buffering and decompression in hackney

Allocation of Resources Without Limits or Throttling vulnerability in hackneyconn in benoitc hackney allows a malicious HTTP server to exhaust client memory via an oversized or highly compressed response body. hackney:request/5 and hackney:body/1 return the whole response body, and nothing bounds...

EUVD-2026-109837

Allocation of Resources Without Limits or Throttling vulnerability in hackneyconn in benoitc hackney allows a malicious HTTP server to exhaust client memory via an oversized or highly compressed response body. hackney:request/5 and hackney:body/1 return the whole response body, and nothing bounds...