ninenines/cowboy vulnerabilities

CVEs whose affected-version data names the ninenines/cowboy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115701High· 8.2

yesterday

Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handle…

▾ Twilightninenines · cowboyEPSS 0.54%via CVEORG