CVE-2026-115700

The benoitc hackney library (versions 4.0.1 to 4.8.x ) is vulnerable to Server-Side Request Forgery (SSRF) due to an Interpretation Conflict in hackney_url. Specifically, the hackney_url:normalize/2 function fails to block percent-encoded bracketed IPv6 literals (e.g., %5B%3A%3Affff%3A127%2E0%2E0...