Ecosystem
Hex
356 known vulnerabilities.
Most affected packages
ash 31
bandit 24
ash_authentication 24
hackney 17
mint 14
mpp 13
jose 9
ash_typescript 8
plug 8
cowlib 8
ash_ai 8
ash_admin 7
mdex 6
livebook 6
html_sanitize_ex 6
ash_graphql 6
ash_authentication_oauth2_server 6
hex_core 5
phoenix 5
tesla 5
ash_sql 5
esaml 4
ash_postgres 4
gun 4
grpc 4
mdex_native 4
guardian 4
cowboy 4
ash_phoenix 4
rabbit_common 4
ash_authentication_phoenix 3
postgrex 3
phoenix_storybook 3
xml_builder 3
saxy 3
samly 3
boruta 3
ash_paper_trail 3
ewe 3
beam_mcp 2
1 result · Clear filters · Feed
-
High 8.7CVE-2026-59248 Public exploit
Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS
Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulnerable server (or client) and cause a denial of service. The HPACK and QPACK prefixed-integer decoder …