Ninenines
7 CVEs across 3 Ninenines products. Browse Ninenines vulnerabilities, severities, and proof-of-concept exploits.
Ninenines products with known CVEs
Ninenines CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-65624 | | | 2026-07-28 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process… |
CVE-2026-59248 | | | 2026-07-28 | Allocation of resources without limits vulnerability in ninenines cowlib allows an unauthenticated remote HTTP/2 or HTTP/3 peer to exhaust memory on the vulner… |
CVE-2026-43966 | | | 2026-06-08 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting… |
CVE-2026-43974 | | | 2026-06-08 | Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client into raw protocol mo… |
CVE-2026-8466 | | | 2026-05-13 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart… |
CVE-2026-43970 | | | 2026-05-13 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in ninenines cowlib allows unauthenticated remote denial of service via memory e… |
CVE-2026-7790 | High | 7.5 | 2026-05-11 | Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation.
The chunked transfer-encoding parser in… |
CVE-2026-43969 | Low | 3.2 | 2026-05-11 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidat… |
CVE-2026-43968 | Medium | 4.0 | 2026-05-11 | Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field v… |