CVE-2026-113431: ninenines cowlib: Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote…

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote peer to exhaust the memory of an HTTP/2 endpoint via HPACK-indexed header fields. cowhttp2machine:headersdecode/4 in src/cowhttp2machine.erl decodes every HEADERS block with...