CVE-2025-3864
1 advisory.
Hex/hackney CVE-2025-3864: low 2.3, EPSS 0.87%
Hackney fails to properly release HTTP connections to the pool
Action: Upgrade hackney to 1.24.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.24.0 | - |
Fixed versions
| 1.24.0 |
Sources
- osv: GHSA-9fm9-hp7p-53mf
- nvd: CVE-2025-3864
- https://github.com/benoitc/hackney/issues/717
- https://github.com/benoitc/hackney/commit/8f13ddac50d1626f8b9a47a08bd599e4efe1773d
- https://cert.pl/en/posts/2025/05/CVE-2025-3864
- https://github.com/benoitc/hackney
CVE-2025-3864 · published · modified · JSON