PatchTheCVEhackney vulnerabilities and fixes
Recent CVEs affecting hackney, with upgrade or downgrade steps. 10 tracked.
hackney has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-05-25. Highest priority: CVE-2026-47073 (score 51/100).
- CVE-2026-47075 HIGH 7.5 UPGRADE Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting
- CVE-2026-47073 HIGH 7.5 UPGRADE Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding
- CVE-2026-47066 HIGH 7.5 UPGRADE Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Alloc
- CVE-2026-47067 HIGH 7.5 UPGRADE Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding
- CVE-2026-47071 HIGH 7.5 UPGRADE Uncontrolled Resource Consumption vulnerability in benoitc hackney allows Flooding
- CVE-2026-47077 HIGH 7.5 UPGRADE Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding
- CVE-2026-47072 HIGH 7.5 UPGRADE Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Requ
- CVE-2026-47069 MEDIUM 5.3 UPGRADE Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Resp
- CVE-2026-47070 MEDIUM 6.1 UPGRADE Sensitive Data Exposure vulnerability in benoitc hackney allows Retrieve Embedded Sensitive Data
- CVE-2026-47076 MEDIUM 6.5 UPGRADE Interpretation Conflict vulnerability in benoitc hackney allows Server Side Request Forgery
FAQ
How do I fix hackney vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hackney being exploited right now?
None of the tracked hackney CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hackney CVE should I patch first?
CVE-2026-47073 currently ranks highest (51/100): Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding.