cowboy vulnerabilities

2 known vulnerabilities in cowboy from Ninenines. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  cowboy: Allocation of Resources Without Limits or Throttling

  CVE-2026-115701Nov 6, 2026Ninenines

  Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cowb

• 8.2 High severity

  cowboy: Allocation of Resources Without Limits or Throttling

  CVE-2026-8466May 13, 2026Ninenines

  Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into