Skip to content
OpenAdvisories

Package · Hex

hackney

17 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-112880

    CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney

    Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_http_connect in benoitc hackney allows HTTP Request Splitting via the value a proxy_auth_fun callback returns. After a 407 response from an …

    benoitc hackney hackney Hex
  • Low 2.1
    CVE-2026-47069

    CRLF injection in cookie domain/path options in hackney

    Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Response Splitting. The hackney_cookie:setcookie/3 function in src/hackney_cookie.erl validates the Name and Value arguments against CRLF and control cha…

    benoitc hackney hackney Hex
  • Low 2.3
    CVE-2025-3864

    Connection pool exhaustion in hackney

    Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has …

    hackney hackney hackney Hex