CVE-2026-65624

The CVE affects the Cowboy HTTP/1.1 handler. The root cause is a per-request header handling flaw: when a request uses repeated header names, values are concatenated into a single binary under one map key, so the max_headers limit never increases and the total header block can grow without bound....

CVE-2026-8466

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboyreq:readpart/3 in src/cowboyreq.erl accumulates incoming request bytes into a Buffer binary with no upper-bound chec...

Cowboy 安全漏洞

Cowboy is a lightweight and high-performance HTTP server based on Erlang/OTP, developed by Nine Nines. Versions of Cowboy from 2.0.0 to 2.15.0 contained security vulnerabilities. These vulnerabilities stemmed from unlimited buffer accumulation during multipart header parsing. This could allow...