CVE-2026-47073

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-47073", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-05-18T17:28:08.322Z", "datePublished": "2026-05-25T14:00:49.112Z", "dateUpdated": "2026-05-27T15:41:30.606Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["hackney_ws"], "packageName": "hackney", "packageURL": "pkg:hex/hackney", "product": "hackney", "programFiles": ["src/hackney_ws.erl"], "programRoutines": [{"name": "hackney_ws:read_handshake_response/3"}, {"name": "hackney_ws:parse_payload/9"}, {"name": "hackney_ws:parse_active_payload/8"}], "repo": "https://github.com/benoitc/hackney", "vendor": "benoitc", "versions": [{"lessThan": "4.0.1", "status": "affected", "version": "2.0.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["hackney_ws"], "packageName": "benoitc/hackney", "packageURL": "pkg:github/benoitc/hackney", "product": "hackney", "programFiles": ["src/hackney_ws.erl"], "programRoutines": [{"name": "hackney_ws:read_handshake_response/3"}, {"name": "hackney_ws:parse_payload/9"}, {"name": "hackney_ws:parse_active_payload/8"}], "repo": "https://github.com/benoitc/hackney", "vendor": "benoitc", "versions": [{"lessThan": "ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc", "status": "affected", "version": "690cecaf236fba49526da404a5bc889a24367a3e", "versionType": "git"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*", "versionEndExcluding": "4.0.1", "versionStartIncluding": "2.0.0", "vulnerable": true}], "negate": false, "operator": "AND"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "finder", "value": "Peter Ullrich"}, {"lang": "en", "type": "remediation developer", "value": "Benoit Chesneau"}, {"lang": "en", "type": "analyst", "value": "Jonatan M\u00e4nnchen / EEF"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding.<p>The WebSocket client in <tt>src/hackney_ws.erl</tt> imposes no upper bound on memory consumption in three code paths. First, <tt>read_handshake_response/3</tt> accumulates received bytes into a growing buffer with no size cap; the per-receive timeout resets on every chunk, so a server that streams bytes without ever sending <tt>\\r\\n\\r\\n</tt> causes the buffer to grow until memory is exhausted. Second, <tt>parse_payload/9</tt> and <tt>parse_active_payload/8</tt> do not validate the declared frame payload length against any limit; because RFC 6455 allows payload lengths up to 2\u207b\u00b9\u2013\u00b9 bytes, a server that announces a very large frame and dribbles bytes causes the accumulation buffer to grow until OOM. Third, the <tt>frag_buffer</tt> field in <tt>#ws_data{}</tt> accumulates continuation frames indefinitely; a server that sends an endless stream of non-final (<tt>nofin</tt>) fragmented frames without ever sending a final (<tt>fin</tt>) frame grows <tt>frag_buffer</tt> without bound.</p><p>In all three cases the attacker only needs to control the WebSocket server the hackney client connects to, with no authentication or special client configuration required.</p><p>This issue affects hackney: from 2.0.0 before 4.0.1.</p>"}], "value": "Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The WebSocket client in src/hackney_ws.erl imposes no upper bound on memory consumption in three code paths. First, read_handshake_response/3 accumulates received bytes into a growing buffer with no size cap; the per-receive timeout resets on every chunk, so a server that streams bytes without ever sending \\r\\n\\r\\n causes the buffer to grow until memory is exhausted. Second, parse_payload/9 and parse_active_payload/8 do not validate the declared frame payload length against any limit; because RFC 6455 allows payload lengths up to 2^63-1 bytes, a server that announces a very large frame and dribbles bytes causes the accumulation buffer to grow until OOM. Third, the frag_buffer field in #ws_data{} accumulates continuation frames indefinitely; a server that sends an endless stream of non-final (nofin) fragmented frames without ever sending a final (fin) frame grows frag_buffer without bound.\n\nIn all three cases the attacker only needs to control the WebSocket server the hackney client connects to, with no authentication or special client configuration required.\n\nThis issue affects hackney: from 2.0.0 before 4.0.1."}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "metrics": [{"cvssV4_0": {"attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.7, "baseSeverity": "HIGH", "privilegesRequired": "NONE", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-05-27T15:41:30.606Z"}, "references": [{"tags": ["vendor-advisory", "related"], "url": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf"}, {"tags": ["related"], "url": "https://cna.erlef.org/cves/CVE-2026-47073.html"}, {"tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-47073"}, {"tags": ["patch"], "url": "https://github.com/benoitc/hackney/commit/ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc"}], "source": {"discovery": "EXTERNAL"}, "title": "Unbounded memory consumption in WebSocket client in hackney", "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"references": [{"url": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-26T15:44:41.043069Z", "id": "CVE-2026-47073", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T15:44:44.796Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-47073", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T15:44:41.043069Z"}}}], "references": [{"url": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-26T15:44:34.495Z"}}], "cna": {"title": "Unbounded memory consumption in WebSocket client in hackney", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Peter Ullrich"}, {"lang": "en", "type": "remediation developer", "value": "Benoit Chesneau"}, {"lang": "en", "type": "analyst", "value": "Jonatan M\u00e4nnchen"}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*"], "repo": "https://github.com/benoitc/hackney", "vendor": "benoitc", "modules": ["hackney_ws"], "product": "hackney", "versions": [{"status": "affected", "version": "2.0.0", "lessThan": "4.0.1", "versionType": "semver"}], "packageURL": "pkg:hex/hackney", "packageName": "hackney", "programFiles": ["src/hackney_ws.erl"], "collectionURL": "https://repo.hex.pm", "defaultStatus": "unaffected", "programRoutines": [{"name": "hackney_ws:read_handshake_response/3"}, {"name": "hackney_ws:parse_payload/9"}, {"name": "hackney_ws:parse_active_payload/8"}]}, {"cpes": ["cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*"], "repo": "https://github.com/benoitc/hackney", "vendor": "benoitc", "modules": ["hackney_ws"], "product": "hackney", "versions": [{"status": "affected", "version": "690cecaf236fba49526da404a5bc889a24367a3e", "lessThan": "ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc", "versionType": "git"}], "packageURL": "pkg:github/benoitc/hackney", "packageName": "benoitc/hackney", "programFiles": ["src/hackney_ws.erl"], "collectionURL": "https://github.com", "defaultStatus": "unaffected", "programRoutines": [{"name": "hackney_ws:read_handshake_response/3"}, {"name": "hackney_ws:parse_payload/9"}, {"name": "hackney_ws:parse_active_payload/8"}]}], "references": [{"url": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf", "tags": ["vendor-advisory", "related"]}, {"url": "https://cna.erlef.org/cves/CVE-2026-47073.html", "tags": ["related"]}, {"url": "https://osv.dev/vulnerability/EEF-CVE-2026-47073", "tags": ["related"]}, {"url": "https://github.com/benoitc/hackney/commit/ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc", "tags": ["patch"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The WebSocket client in src/hackney_ws.erl imposes no upper bound on memory consumption in three code paths. First, read_handshake_response/3 accumulates received bytes into a growing buffer with no size cap; the per-receive timeout resets on every chunk, so a server that streams bytes without ever sending \\r\\n\\r\\n causes the buffer to grow until memory is exhausted. Second, parse_payload/9 and parse_active_payload/8 do not validate the declared frame payload length against any limit; because RFC 6455 allows payload lengths up to 2^63-1 bytes, a server that announces a very large frame and dribbles bytes causes the accumulation buffer to grow until OOM. Third, the frag_buffer field in #ws_data{} accumulates continuation frames indefinitely; a server that sends an endless stream of non-final (nofin) fragmented frames without ever sending a final (fin) frame grows frag_buffer without bound.\n\nIn all three cases the attacker only needs to control the WebSocket server the hackney client connects to, with no authentication or special client configuration required.\n\nThis issue affects hackney: from 2.0.0 before 4.0.1.", "supportingMedia": [{"type": "text/html", "value": "Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding.<p>The WebSocket client in <tt>src/hackney_ws.erl</tt> imposes no upper bound on memory consumption in three code paths. First, <tt>read_handshake_response/3</tt> accumulates received bytes into a growing buffer with no size cap; the per-receive timeout resets on every chunk, so a server that streams bytes without ever sending <tt>\\r\\n\\r\\n</tt> causes the buffer to grow until memory is exhausted. Second, <tt>parse_payload/9</tt> and <tt>parse_active_payload/8</tt> do not validate the declared frame payload length against any limit; because RFC 6455 allows payload lengths up to 2\u207b\u00b9\u2013\u00b9 bytes, a server that announces a very large frame and dribbles bytes causes the accumulation buffer to grow until OOM. Third, the <tt>frag_buffer</tt> field in <tt>#ws_data{}</tt> accumulates continuation frames indefinitely; a server that sends an endless stream of non-final (<tt>nofin</tt>) fragmented frames without ever sending a final (<tt>fin</tt>) frame grows <tt>frag_buffer</tt> without bound.</p><p>In all three cases the attacker only needs to control the WebSocket server the hackney client connects to, with no authentication or special client configuration required.</p><p>This issue affects hackney: from 2.0.0 before 4.0.1.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400 Uncontrolled Resource Consumption"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.0.1", "versionStartIncluding": "2.0.0"}], "operator": "AND"}], "operator": "AND"}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-05-26T19:46:50.123Z"}}}, "cveMetadata": {"cveId": "CVE-2026-47073", "state": "PUBLISHED", "dateUpdated": "2026-05-26T19:46:50.123Z", "dateReserved": "2026-05-18T17:28:08.322Z", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "datePublished": "2026-05-25T14:00:49.112Z", "assignerShortName": "EEF"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://repo.hex.pm", "cpes": ["cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["hackney_ws"], "packageName": "hackney", "packageURL": "pkg:hex/hackney", "product": "hackney", "programFiles": ["src/hackney_ws.erl"], "programRoutines": [{"name": "hackney_ws:read_handshake_response/3"}, {"name": "hackney_ws:parse_payload/9"}, {"name": "hackney_ws:parse_active_payload/8"}], "repo": "https://github.com/benoitc/hackney", "vendor": "benoitc", "versions": [{"lessThan": "4.0.1", "status": "affected", "version": "2.0.0", "versionType": "semver"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["hackney_ws"], "packageName": "benoitc/hackney", "packageURL": "pkg:github/benoitc/hackney", "product": "hackney", "programFiles": ["src/hackney_ws.erl"], "programRoutines": [{"name": "hackney_ws:read_handshake_response/3"}, {"name": "hackney_ws:parse_payload/9"}, {"name": "hackney_ws:parse_active_payload/8"}], "repo": "https://github.com/benoitc/hackney", "vendor": "benoitc", "versions": [{"lessThan": "ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc", "status": "affected", "version": "690cecaf236fba49526da404a5bc889a24367a3e", "versionType": "git"}]}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:benoitc:hackney:*:*:*:*:*:*:*:*", "matchCriteriaId": "B119C170-E9CA-4AEE-BE04-F074E70CBF82", "versionEndExcluding": "4.0.1", "versionStartIncluding": "2.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The WebSocket client in src/hackney_ws.erl imposes no upper bound on memory consumption in three code paths. First, read_handshake_response/3 accumulates received bytes into a growing buffer with no size cap; the per-receive timeout resets on every chunk, so a server that streams bytes without ever sending \\r\\n\\r\\n causes the buffer to grow until memory is exhausted. Second, parse_payload/9 and parse_active_payload/8 do not validate the declared frame payload length against any limit; because RFC 6455 allows payload lengths up to 2^63-1 bytes, a server that announces a very large frame and dribbles bytes causes the accumulation buffer to grow until OOM. Third, the frag_buffer field in #ws_data{} accumulates continuation frames indefinitely; a server that sends an endless stream of non-final (nofin) fragmented frames without ever sending a final (fin) frame grows frag_buffer without bound.\n\nIn all three cases the attacker only needs to control the WebSocket server the hackney client connects to, with no authentication or special client configuration required.\n\nThis issue affects hackney: from 2.0.0 before 4.0.1."}, {"lang": "es", "value": "Vulnerabilidad de asignaci\u00f3n de recursos sin l\u00edmites ni limitaci\u00f3n en benoitc hackney permite inundaci\u00f3n. El cliente WebSocket en src/hackney_ws.erl no impone un l\u00edmite superior al consumo de memoria en tres rutas de c\u00f3digo. Primero, read_handshake_response/3 acumula los bytes recibidos en un b\u00fafer creciente sin l\u00edmite de tama\u00f1o; el tiempo de espera por recepci\u00f3n se reinicia en cada fragmento, por lo que un servidor que transmite bytes sin enviar nunca \\r\\n\\r\\n hace que el b\u00fafer crezca hasta que la memoria se agote. Segundo, parse_payload/9 y parse_active_payload/8 no validan la longitud de la carga \u00fatil del marco declarada contra ning\u00fan l\u00edmite; debido a que RFC 6455 permite longitudes de carga \u00fatil de hasta 2^63-1 bytes, un servidor que anuncia un marco muy grande y gotea bytes hace que el b\u00fafer de acumulaci\u00f3n crezca hasta OOM. Tercero, el campo frag_buffer en #ws_data{} acumula marcos de continuaci\u00f3n indefinidamente; un servidor que env\u00eda un flujo interminable de marcos fragmentados no finales (nofin) sin enviar nunca un marco final (fin) hace crecer frag_buffer sin l\u00edmite.\n\nEn los tres casos, el atacante solo necesita controlar el servidor WebSocket al que se conecta el cliente hackney, sin autenticaci\u00f3n ni configuraci\u00f3n especial del cliente requerida.\n\nEste problema afecta a hackney: desde 2.0.0 antes de 4.0.1."}], "id": "CVE-2026-47073", "lastModified": "2026-07-24T10:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47073", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-26T15:44:41.043069Z", "version": "2.0.3"}}]}, "published": "2026-05-25T15:16:22.410", "references": [{"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch", "Third Party Advisory"], "url": "https://cna.erlef.org/cves/CVE-2026-47073.html"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch"], "url": "https://github.com/benoitc/hackney/commit/ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch", "Third Party Advisory"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-47073"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "https://github.com/benoitc/hackney/security/advisories/GHSA-q8jg-fgj4-fphf"}], "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[2.0.0,4.0.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "hackney", "source": "cna", "vendor": "benoitc"}, "product": "hackney", "vendor": "benoitc"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[690cecaf236fba49526da404a5bc889a24367a3e,ce0109e2970ace6e20ff29bae9d05c3ac22ec6dc)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "hackney", "source": "cna", "vendor": "benoitc"}, "product": "hackney", "vendor": "benoitc"}], "created": "2026-05-25T15:30:06.581670+00:00", "updated": "2026-05-26T13:00:47.097217+00:00", "vendors": ["benoitc", "benoitc$PRODUCT$hackney"]}