IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2025-05-28 12:15

MODIFIED

2025-05-28 15:01

EPSS (Prob. Exploit)

0.87%

Top 40.9%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-11 OSV 🔗 2026-11-08

> DESCRIPTION

Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-9fm9-hp7p-53mf LOW

Hackney fails to properly release HTTP connections to the pool

AFFECTED PACKAGES:

ERLANG / hackney

< 1.24.0

Fixed in: 1.24.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Connection pool exhaustion in hackney

AFFECTED PACKAGES:

Unknown / Unknown

111 versions affected

ALIASES:

GHSA-9fm9-hp7p-53mf

> HISTORIQUE DES MODIFICATIONS

Première apparition

28/05/2025 12:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 15:04

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui