Skip to content
OpenAdvisories

Package · Debian

erlang-cowlib

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.3
    CVE-2026-43971

    Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1

    Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cow_link:link/1. cow_link:do_link/1 in cowlib interpolates the target URI, rel value, and attribute keys direc…

    ninenines cowlib rabbitmq-server cowlib Debian Ubuntu Azure Linux Hex
  • High 8.7
    CVE-2026-59248 Public exploit

    Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

    Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service. The HPACK and QPACK prefixed-integer decoder …

    ninenines cowlib rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux Hex
  • High 8.2
    CVE-2026-43970

    Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

    Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticated remote denial of service via memory exhaustion. cow_spdy:inflate/2 in cowlib passes peer-supplied compressed bytes directly to zlib:infla…

    ninenines cowlib cowlib erlang-cowlib Debian Ubuntu Hex
  • High 8.7
    CVE-2026-7790

    Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS

    Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number of hex digits in the chunk-size field. Each digit causes a bi…

    ninenines cowlib rabbitmq-server cowlib Debian Ubuntu Azure Linux Hex