CVE-2026-8466

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboyreq:readpart/3 in src/cowboyreq.erl accumulates incoming request bytes into a Buffer binary with no upper-bound chec...

Cowboy 安全漏洞

Cowboy is a lightweight and high-performance HTTP server based on Erlang/OTP, developed by Nine Nines. Versions of Cowboy from 2.0.0 to 2.15.0 contained security vulnerabilities. These vulnerabilities stemmed from unlimited buffer accumulation during multipart header parsing. This could allow...