Nninenines

Products

Exploited and recent CVEs

• CVE-2026-43971 Medium 6.3 Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 0.5%
• CVE-2026-65624 Medium 6.9 Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion 0.4%
• CVE-2026-59248 High 8.7 Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS 0.3%
• CVE-2026-43966 Medium 6.3 HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 0.3%
• CVE-2026-43973 High 8.7 gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion 0.5%
• CVE-2026-43972 Medium 6.3 gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection 0.2%
• CVE-2026-43974 High 8.7 gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM 0.5%
• CVE-2026-43970 High 8.2 Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame 0.5%
• CVE-2026-8466 High 8.2 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy 0.4%
• CVE-2026-43968 Medium 6.3 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 0.3%
• CVE-2026-7790 High 8.7 Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS 0.4%
• CVE-2026-43969 Low 2.1 Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 0.1%