Benoit Chesneau

CR/LF injection in query parameter in hackney

Unbounded body accumulation in HTTP/3 response loop in hackney

SSRF allowlist bypass via percent-encoded host in hackney

Unbounded memory consumption in WebSocket client in hackney

CRLF injection in WebSocket upgrade request in hackney

SOCKS5 TLS upgrade ignores caller timeout in hackney

HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney

CRLF injection in cookie domain/path options in hackney

Atom table exhaustion via unrecognized URL schemes in hackney

Infinite loop in Alt-Svc header parser in hackney