Vulnerabilidades em benoitc
18 resultadosAnálise Vexday
O fornecedor benoitc apresenta um padrão recente de vulnerabilidades, com 10 das 12 CVEs publicadas nos últimos 90 dias, indicando descobertas ativas em seus produtos. Nenhuma vulnerabilidade está sob exploração ativa confirmada (KEV) e não há críticas de severidade máxima, reduzindo o risco imediato. A fraqueza dominante (CWE-400: Uncontrolled Resource Consumption) sugere problemas de resiliência que exigem monitoramento, mas o perfil geral permanece de risco moderado.
CVE-2024-1135HIGHHTTP Request Smuggling in benoitc/gunicornEPSS 3.0%CVE-2026-47073HIGHUnbounded memory consumption in WebSocket client in hackneyEPSS 0.9%CVE-2024-6827HIGHHTTP Request Smuggling in benoitc/gunicornEPSS 0.8%CVE-2026-47067HIGHAtom table exhaustion via unrecognized URL schemes in hackneyEPSS 0.8%CVE-2026-47066HIGHInfinite loop in Alt-Svc header parser in hackneyEPSS 0.8%CVE-2026-47071HIGHSOCKS5 TLS upgrade ignores caller timeout in hackneyEPSS 0.8%CVE-2026-47077HIGHUnbounded body accumulation in HTTP/3 response loop in hackneyEPSS 0.7%CVE-2026-97200HIGHUnbounded response body buffering and decompression in hackneyEPSS 0.6%CVE-2026-47072MEDIUMCRLF injection in WebSocket upgrade request in hackneyEPSS 0.5%CVE-2026-47075MEDIUMCR/LF injection in query parameter in hackneyEPSS 0.5%CVE-2026-47069LOWCRLF injection in cookie domain/path options in hackneyEPSS 0.4%CVE-2026-47070MEDIUMHTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackneyEPSS 0.4%CVE-2026-113440MEDIUMHTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackneyEPSS 0.3%CVE-2026-115693CRITICALCustom cacerts or cacertfile do not restrict trust to the pinned CA in hackneyEPSS 0.3%CVE-2026-49457CRITICALQUIC has Broken TLS verificationEPSS 0.2%CVE-2026-47076MEDIUMSSRF allowlist bypass via percent-encoded host in hackneyEPSS 0.2%CVE-2026-112880LOWCRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackneyEPSS 0.2%CVE-2026-115700MEDIUMSSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackneyEPSS 0.1%