CVE-2026-113431

The cowlib library (from version 2.7.0 onward) contains an Allocation of Resources Without Limits or Throttling vulnerability (CWE-770) in the cow_http2_machine component. The root cause is that the headers_decode/4 function fails to bound the size of the decoded header list as required by RFC 91...