Resource exhaustion in Ninenines Cowboy

CVE-2026-8466

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incomi…

EPSS: 0.000 (6.7th percentile) — read the EPSS interpretation.