Skip to content
OpenAdvisories

Package · Hex

cowlib

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-43971

    Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1

    Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cow_link:link/1. cow_link:do_link/1 in cowlib interpolates the target URI, rel value, and attribute keys direc…

    ninenines cowlib cowlib erlang-cowlib Debian Ubuntu Hex
  • Medium 6.3
    CVE-2026-43966

    HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

    Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields string values. cow_http_struct_hd:escape_string/2 in cowlib…

    ninenines cowlib rabbitmq-server cowlib Debian Hex
  • Medium 6.3
    CVE-2026-43968

    CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

    Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow_sse:event/1 in cowlib guards the id and event fields against \n but not against bare \r, …

    ninenines cowlib cowlib Hex