Ninenines

12 CVEs across 3 Ninenines products. Browse Ninenines vulnerabilities, severities, and proof-of-concept exploits.

Ninenines products with known CVEs

ProductCVEs
Cowlib7
Gun3
Cowboy2
Ninenines CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-439712026-08-18Improper Encoding or Escaping of Output vulnerability in ninenines cowlib allows Link header directive smuggling via unescaped special characters in cow_link:l…
CVE-2026-656242026-07-28Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process…
CVE-2026-592482026-07-28Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulner…
CVE-2026-43966Medium5.32026-06-08Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting…
CVE-2026-43974High7.52026-06-08Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mo…
CVE-2026-43973High7.52026-06-08Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via unbounded HTTP/1.1 re…
CVE-2026-43972High7.22026-06-08Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2 PUSH_PROMISE authority. …
CVE-2026-84662026-05-13Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart…
CVE-2026-439702026-05-13Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticated remote denial of service via memory e…
CVE-2026-7790High7.52026-05-11Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in…
CVE-2026-43969Low3.22026-05-11Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidat…
CVE-2026-43968Medium4.02026-05-11Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field v…