Skip to content
OpenAdvisories

Package · Ubuntu

erlang-cowboy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.9
    CVE-2026-65624

    Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. The HTTP/1.1 handler in cowboy_http enforces the max_headers limit by counting…

    ninenines cowboy rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux Hex
  • High 8.2
    CVE-2026-8466

    Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy

    Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into…

    ninenines cowboy rabbitmq-server cowboy Debian Ubuntu Azure Linux Hex