CVE-2026-115701

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cowboyhttp:parse/2 in src/cowboyhttp.erl...

EUVD-2026-118103

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cowboyhttp:parse/2 in src/cowboyhttp.erl...

EEF-CVE-2026-115701 Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion

Summary Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cowboyhttp:parse/2 in...

CVE-2026-115701

The cowboy web server (version 2.18.0 and onward) is vulnerable to a memory exhaustion vulnerability due to unbounded buffering of pipelined data during HTTP/1.1 request handling. In src/cowboy_http.erl, the cowboy_http:parse/2 function fails to limit the buffer when a handler is still running fo...

CVE-2026-115701: ninenines cowboy: Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote…

Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. Once a request has been received in full and its handler is still running, cowboyhttp:parse/2 in src/cowboyhttp.erl...