{"schema_version":1,"title":"Benoitc vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 13 vulnerabilities in Benoitc: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-97200, was published on 26 October 2026. 5 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/benoitc","json_url":"https://junglewise.ai/threats/vendors/benoitc.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/benoitc","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":3,"all_time":13,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":5,"last_90_days":5,"last_365_days":13},"latest":[{"cve":"CVE-2026-97200","slug":"cve-2026-97200-allocation-of-resources-without-limits-or-throttling","title":"benoitc hackney denial of service via unbounded buffering","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:42.18+00:00","url":"https://junglewise.ai/threats/cve-2026-97200-allocation-of-resources-without-limits-or-throttling"},{"cve":"CVE-2026-115700","slug":"cve-2026-115700-interpretation-conflict-vulnerability-in-hackney-url-in-benoitc","title":"hackney HTTP client SSRF via percent-encoded IPv6 literal","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:32.08+00:00","url":"https://junglewise.ai/threats/cve-2026-115700-interpretation-conflict-vulnerability-in-hackney-url-in-benoitc"},{"cve":"CVE-2026-115693","slug":"cve-2026-115693-improper-certificate-validation-vulnerability-in-hackney-ssl-in","title":"Erlang hackney improper certificate validation in SSL pinning","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:31.853+00:00","url":"https://junglewise.ai/threats/cve-2026-115693-improper-certificate-validation-vulnerability-in-hackney-ssl-in"},{"cve":"CVE-2026-113440","slug":"cve-2026-113440-insufficiently-protected-credentials-vulnerability-in-hackney-in","title":"hackney insufficiently protected credentials in redirect","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:28.887+00:00","url":"https://junglewise.ai/threats/cve-2026-113440-insufficiently-protected-credentials-vulnerability-in-hackney-in"},{"cve":"CVE-2026-112880","slug":"cve-2026-112880-improper-neutralization-of-crlf-sequences-in-http-headers-http","title":"hackney HTTP request/response splitting in proxy authentication","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:28.44+00:00","url":"https://junglewise.ai/threats/cve-2026-112880-improper-neutralization-of-crlf-sequences-in-http-headers-http"},{"cve":"CVE-2026-47074","cvss":8.7,"epss":0.0023,"slug":"cve-2026-47074-ex-aws-ex-aws-sns-signature-bypass-in-verify-message-1","title":"ex-aws ex_aws_sns signature bypass in verify_message/1","severity":"high","exploited":false,"published_at":"2026-05-28T10:16:39.8+00:00","url":"https://junglewise.ai/threats/cve-2026-47074-ex-aws-ex-aws-sns-signature-bypass-in-verify-message-1"},{"cve":"CVE-2026-47076","cvss":6.9,"epss":0.002,"slug":"cve-2026-47076-benoitc-hackney-ssrf-via-percent-encoded-host-in-normalize-2","title":"benoitc hackney SSRF via percent-encoded host in normalize/2","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.69+00:00","url":"https://junglewise.ai/threats/cve-2026-47076-benoitc-hackney-ssrf-via-percent-encoded-host-in-normalize-2"},{"cve":"CVE-2026-47075","cvss":6.8,"epss":0.0042,"slug":"cve-2026-47075-benoitc-hackney-http-request-splitting-via-crlf-injection-in","title":"benoitc hackney HTTP request splitting via CRLF injection in query string","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.55+00:00","url":"https://junglewise.ai/threats/cve-2026-47075-benoitc-hackney-http-request-splitting-via-crlf-injection-in"},{"cve":"CVE-2026-47073","cvss":8.7,"epss":0.0083,"slug":"cve-2026-47073-benoitc-hackney-unbounded-memory-consumption-in-websocket-client","title":"benoitc hackney unbounded memory consumption in WebSocket client","severity":"high","exploited":false,"published_at":"2026-05-25T15:16:22.41+00:00","url":"https://junglewise.ai/threats/cve-2026-47073-benoitc-hackney-unbounded-memory-consumption-in-websocket-client"},{"cve":"CVE-2026-47072","cvss":6.9,"epss":0.0051,"slug":"cve-2026-47072-benoitc-hackney-crlf-injection-in-websocket-upgrade-request","title":"Benoitc hackney CRLF injection in WebSocket upgrade request","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.28+00:00","url":"https://junglewise.ai/threats/cve-2026-47072-benoitc-hackney-crlf-injection-in-websocket-upgrade-request"},{"cve":"CVE-2026-47071","cvss":8.2,"epss":0.007,"slug":"cve-2026-47071-benoitc-hackney-uncontrolled-resource-consumption-in-socks5-tls","title":"benoitc hackney uncontrolled resource consumption in SOCKS5 TLS upgrade","severity":"high","exploited":false,"published_at":"2026-05-25T15:16:22.143+00:00","url":"https://junglewise.ai/threats/cve-2026-47071-benoitc-hackney-uncontrolled-resource-consumption-in-socks5-tls"},{"cve":"CVE-2026-47070","cvss":6,"epss":0.0035,"slug":"cve-2026-47070-benoitc-hackney-sensitive-data-exposure-in-http-3-redirect","title":"benoitc hackney sensitive data exposure in HTTP/3 redirect handler","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.01+00:00","url":"https://junglewise.ai/threats/cve-2026-47070-benoitc-hackney-sensitive-data-exposure-in-http-3-redirect"},{"cve":"CVE-2026-47069","cvss":2.1,"epss":0.0037,"slug":"cve-2026-47069-benoitc-hackney-crlf-injection-in-hackney-cookie","title":"benoitc hackney CRLF injection in hackney_cookie","severity":"low","exploited":false,"published_at":"2026-05-25T15:16:21.87+00:00","url":"https://junglewise.ai/threats/cve-2026-47069-benoitc-hackney-crlf-injection-in-hackney-cookie"}],"vendor":{"hub":true,"name":"Benoitc","slug":"benoitc","url":"https://junglewise.ai/threats/vendors/benoitc"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-47073","cvss":8.7,"epss":0.0083,"slug":"cve-2026-47073-benoitc-hackney-unbounded-memory-consumption-in-websocket-client","title":"benoitc hackney unbounded memory consumption in WebSocket client","severity":"high","exploited":false,"published_at":"2026-05-25T15:16:22.41+00:00","url":"https://junglewise.ai/threats/cve-2026-47073-benoitc-hackney-unbounded-memory-consumption-in-websocket-client"},{"cve":"CVE-2026-47074","cvss":8.7,"epss":0.0023,"slug":"cve-2026-47074-ex-aws-ex-aws-sns-signature-bypass-in-verify-message-1","title":"ex-aws ex_aws_sns signature bypass in verify_message/1","severity":"high","exploited":false,"published_at":"2026-05-28T10:16:39.8+00:00","url":"https://junglewise.ai/threats/cve-2026-47074-ex-aws-ex-aws-sns-signature-bypass-in-verify-message-1"},{"cve":"CVE-2026-47071","cvss":8.2,"epss":0.007,"slug":"cve-2026-47071-benoitc-hackney-uncontrolled-resource-consumption-in-socks5-tls","title":"benoitc hackney uncontrolled resource consumption in SOCKS5 TLS upgrade","severity":"high","exploited":false,"published_at":"2026-05-25T15:16:22.143+00:00","url":"https://junglewise.ai/threats/cve-2026-47071-benoitc-hackney-uncontrolled-resource-consumption-in-socks5-tls"},{"cve":"CVE-2026-47072","cvss":6.9,"epss":0.0051,"slug":"cve-2026-47072-benoitc-hackney-crlf-injection-in-websocket-upgrade-request","title":"Benoitc hackney CRLF injection in WebSocket upgrade request","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.28+00:00","url":"https://junglewise.ai/threats/cve-2026-47072-benoitc-hackney-crlf-injection-in-websocket-upgrade-request"},{"cve":"CVE-2026-47076","cvss":6.9,"epss":0.002,"slug":"cve-2026-47076-benoitc-hackney-ssrf-via-percent-encoded-host-in-normalize-2","title":"benoitc hackney SSRF via percent-encoded host in normalize/2","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.69+00:00","url":"https://junglewise.ai/threats/cve-2026-47076-benoitc-hackney-ssrf-via-percent-encoded-host-in-normalize-2"},{"cve":"CVE-2026-47075","cvss":6.8,"epss":0.0042,"slug":"cve-2026-47075-benoitc-hackney-http-request-splitting-via-crlf-injection-in","title":"benoitc hackney HTTP request splitting via CRLF injection in query string","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.55+00:00","url":"https://junglewise.ai/threats/cve-2026-47075-benoitc-hackney-http-request-splitting-via-crlf-injection-in"},{"cve":"CVE-2026-47070","cvss":6,"epss":0.0035,"slug":"cve-2026-47070-benoitc-hackney-sensitive-data-exposure-in-http-3-redirect","title":"benoitc hackney sensitive data exposure in HTTP/3 redirect handler","severity":"medium","exploited":false,"published_at":"2026-05-25T15:16:22.01+00:00","url":"https://junglewise.ai/threats/cve-2026-47070-benoitc-hackney-sensitive-data-exposure-in-http-3-redirect"},{"cve":"CVE-2026-47069","cvss":2.1,"epss":0.0037,"slug":"cve-2026-47069-benoitc-hackney-crlf-injection-in-hackney-cookie","title":"benoitc hackney CRLF injection in hackney_cookie","severity":"low","exploited":false,"published_at":"2026-05-25T15:16:21.87+00:00","url":"https://junglewise.ai/threats/cve-2026-47069-benoitc-hackney-crlf-injection-in-hackney-cookie"},{"cve":"CVE-2026-97200","slug":"cve-2026-97200-allocation-of-resources-without-limits-or-throttling","title":"benoitc hackney denial of service via unbounded buffering","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:42.18+00:00","url":"https://junglewise.ai/threats/cve-2026-97200-allocation-of-resources-without-limits-or-throttling"},{"cve":"CVE-2026-115700","slug":"cve-2026-115700-interpretation-conflict-vulnerability-in-hackney-url-in-benoitc","title":"hackney HTTP client SSRF via percent-encoded IPv6 literal","severity":"info","exploited":false,"published_at":"2026-10-26T14:16:32.08+00:00","url":"https://junglewise.ai/threats/cve-2026-115700-interpretation-conflict-vulnerability-in-hackney-url-in-benoitc"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Benoitc Hackney","slug":"benoitc-hackney","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/benoitc-hackney"}]}