Jonatan Männchen / EEF

CRLF injection in WebSocket upgrade request in hackney

Missing authorization check on save-job event handler in oban_web

SSRF allowlist bypass via percent-encoded host in hackney

HTTP/3 redirect handler leaks Authorization and Cookie headers to cross-origin redirect target in hackney

WebSocket fragmented message reassembly unbounded in bandit

Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

Unbounded range expansion in cron describe causes memory exhaustion in oban_web

Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook

Unbounded body accumulation in HTTP/3 response loop in hackney

SOCKS5 TLS upgrade ignores caller timeout in hackney