ninenines/cowlib Security Advisories | GitStock

medium2026-06-08

cowboy and gun affected by an HTTP Request/Response Splitting vulnerability

GHSA-w4f7-4cxr-rv3c · CVE-2026-43966

high2026-05-13

cowlib: Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

GHSA-84f2-rp86-235p · CVE-2026-43970

high2026-05-11

cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive Allocation

GHSA-32p9-57cr-4x65 · CVE-2026-7790

medium2026-05-11

ninenines cowlib: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability allows SSE event splitting and injection via unvalidated field values

GHSA-hv23-4qp7-8c8r · CVE-2026-43968

low2026-05-11

cowlib: Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

GHSA-g2wm-735q-3f56 · CVE-2026-43969