Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/11 6:6 p.m.11 views

EEF-CVE-2026-43968 CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

Summary Improper Neutralization of CRLF Sequences 'CRLF Injection' vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow\sse:event/1 in cowlib guards the id and event fields against \n but not against bare \r, and the internal prefix\lines/2...

6.3CVSS6.2AI score0.00266EPSS
SaveExploits0References3
Rows per page
Query Builder