Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

hex

cowlib

hex

Support library for manipulating Web protocols.

View on github.com · View on hex.pm

Security Advisories for cowlib in hex

Medium
12 days ago

Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 EEF-CVE-2026-43971

hex cowlib
High
about 1 month ago

Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS EEF-CVE-2026-59248

hex cowlib
Medium
3 months ago

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 EEF-CVE-2026-43966

hex cowlib
High
4 months ago

cowlib: Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame GSA_kwCzR0hTQS04NGYyLXJwODYtMjM1cM4ABW1C

hex cowlib
High
4 months ago

Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame EEF-CVE-2026-43970

hex cowlib
High
4 months ago

cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive Allocation GSA_kwCzR0hTQS0zMnA5LTU3Y3ItNHg2Nc4ABWml

hex cowlib
Moderate
4 months ago

ninenines cowlib: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability allows SSE event splitting and injection via unvalidated field values GSA_kwCzR0hTQS1odjIzLTRxcDctOGM4cs4ABWm0

hex cowlib
Low
4 months ago

cowlib: Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 GSA_kwCzR0hTQS1nMndtLTczNXEtM2Y1Ns4ABWms

hex cowlib
Medium
4 months ago

CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 EEF-CVE-2026-43968

hex cowlib
High
4 months ago

Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS EEF-CVE-2026-7790

hex cowlib
Low
4 months ago

Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 EEF-CVE-2026-43969

hex cowlib

Filter by Severity

High 5 Medium 3 Low 2 Moderate 1