CVE Feed

    Dashboard / CVE / CVE-2026-47070

    CVE-2026-47070

    Sensitive Data Exposure vulnerability in benoitc hackney allows Retrieve Embedded Sensitive Data. The HTTP/3 redirect handler in src/hackney_h3.erl passes the original request headers unchanged to the redirect target without performing any cross-origin check. When a client issues an HTTP/3 request with follow_redirect enabled and includes Authorization or Cookie headers, a server responding with a 3xx redirect to a different host will cause the client to forward those credentials verbatim to the new origin. The main hackney.erl module has maybe_strip_auth_on_redirect/2 (guarded by the location_trusted option) to address CVE-2018-1000007, but hackney_h3.erl is missing this protection entirely. This issue affects hackney: from 3.1.1 before 4.0.1.

    Published:May 25, 2026
    Last Modified:May 27, 2026
    EPS:May 25, 2026
    EPSS Score:0.00041
    CVSS Score:6.1

    Affected Products

    Vendor
    Benoitc
    Product
    Hackney

    Exploits

    https://github.com/benoitc/hackney/security/advisories/GHSA-h73q-4w9q-82h4https://github.com/benoitc/hackney/security/advisories/GHSA-h73q-4w9q-82h4

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-178 Cross-Site Flashing

    Related CVEs

    CVE-2026-47073 (CVSS 8.7) — Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The Web…
    CVE-2026-47067 (CVSS 8.7) — Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. The URL…
    CVE-2026-47072 (CVSS 6.9) — Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Requ…
    CVE-2026-47076 (CVSS 6.9) — Interpretation Conflict vulnerability in benoitc hackney allows Server Side Request Forgery. hackney_url:norma…
    CVE-2026-47075 (CVSS 6.8) — Improper Neutralization of CRLF Sequences vulnerability in benoitc hackney allows HTTP Request Splitting. hack…
    CVE-2026-47077 (CVSS 8.2) — Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding. hackney…
    CVE-2026-47071 (CVSS 8.2) — Uncontrolled Resource Consumption vulnerability in benoitc hackney allows Flooding. The SOCKS5 transport in sr…
    CVE-2026-47066 (CVSS 8.7) — Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Alloc…
    CVE-2026-47069 (CVSS 2.1) — Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Resp…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High