hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pleroma/changelog.d/hackney-4.9.1.security

1 line
162 B
Text
Raw Normal View History

Sec: Update hackney to version 4.9.1 Hackney 4.9 enforces max_body while it reads and returns {:error, {:closed, partial}} for a truncated body; the hackney regression tests now pin that. The certifi override goes, as hackney itself now asks for certifi ~> 2.18.0.
2026-10-26 21:52:03 +04:00
Update Hackney to version 4.9.1, which fixes unbounded response body buffering and decompression, CA pinning, redirect credential leaks and other vulnerabilities
Reference in a new issue Copy permalink