Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Connection pool exhaustion in hackney
Vulnerability Description
Hackney fails to properly release HTTP connections to the pool after handling 307 Temporary Redirect responses. Remote attackers can exploit this to exhaust connection pools, causing denial of service in applications using the library. Fix for this issue has been included in 1.24.0 release.
CVSS Information
N/A
Vulnerability Type
对已超过有效生命周期的资源丧失索引
Vulnerability Title
Hackney 安全漏洞
Vulnerability Description
Hackney是Hackney公司的一个程序库。 Hackney存在安全漏洞,该漏洞源于处理307重定向响应后未正确释放HTTP连接,可能导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A