All 7 CVE vulnerabilities found in cowlib, with AI-generated Chinese analysis, references, and POCs.
Vendor: ninenines
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-43971 | Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 CWE-116 | 6.3 | Medium | 2026-08-18 |
| CVE-2026-59248 | Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS CWE-770 | 8.7 | High | 2026-07-28 |
| CVE-2026-43966 | HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 CWE-113 | 6.3 | Medium | 2026-06-08 |
| CVE-2026-43970 | Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame CWE-409 | - | - | 2026-05-13 |
| CVE-2026-43968 | CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 CWE-93 | - | - | 2026-05-11 |
| CVE-2026-7790 | Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS CWE-400 | - | - | 2026-05-11 |
| CVE-2026-43969 | Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 CWE-93 | 2.1 | Low | 2026-05-11 |
All 7 known CVE vulnerabilities affecting cowlib with full Chinese analysis, references, and POCs where available.