Skip to content
OpenAdvisories

Vendor

benoitc

18 known vulnerabilities.

Products

hackney 15 benoitc/gunicorn 2 erlang_quic 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-112880

    CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney

    Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_http_connect in benoitc hackney allows HTTP Request Splitting via the value a proxy_auth_fun callback returns. After a 407 response from an …

    benoitc hackney hackney Hex
  • Low 2.1
    CVE-2026-47069

    CRLF injection in cookie domain/path options in hackney

    Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Response Splitting. The hackney_cookie:setcookie/3 function in src/hackney_cookie.erl validates the Name and Value arguments against CRLF and control cha…

    benoitc hackney hackney Hex