Skip to content
OpenAdvisories

Package · Hex

cowboy

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-115701

    Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cow…

    ninenines cowboy cowboy its Ubuntu Hex
  • High 8.2
    CVE-2026-8466

    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into…

    ninenines cowboy rabbitmq-server cowboy Debian Ubuntu Azure Linux Hex