Skip to content
OpenAdvisories

Vendor

benoitc

18 known vulnerabilities.

Products

hackney 15 benoitc/gunicorn 2 erlang_quic 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-115693

    Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

    Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds {partial_ch…

    benoitc hackney hackney Hex
  • Critical 9.1
    CVE-2026-49457

    QUIC has Broken TLS verification

    erlang_quic is a pure Erlang QUIC implementation. Prior to version 1.4.4, the QUIC client did not authenticate the server during the TLS 1.3 handshake. The CertificateVerify signature was not checked, the certificate chain was not validated, and the hostname …

    benoitc erlang_quic quic Hex