A security vulnerability has been identified and fixed in neon: neon 0.28.0 through 0.28.2 allows remote servers to cause a denial of service via vectors related to Digest authentication and Digest domain parameter support . The updated packages have been upgraded to version 0.28.3 to prevent this.