What’s Vulnerable › Products

ninenines cowlib vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ninenines cowlib version is affected

Latest ninenines cowlib vulnerabilities

• CVE-2026-43971 — Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 (CVSS 6.3)
• CVE-2026-59248 — Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS (CVSS 8.7)
• CVE-2026-43966 — HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 (CVSS 5.3)
• CVE-2026-43970 — Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame (CVSS 8.2)
• CVE-2026-7790 — Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS (CVSS 7.5)
• CVE-2026-43969 — Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 (CVSS 3.2)
• CVE-2026-43968 — CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 (CVSS 4.0)