Skip to content
OpenAdvisories

Product · benoitc

hackney

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-115693

    Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney

    Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds {partial_ch…

    benoitc hackney hackney Hex