https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:51:02 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0674 certfr-2026-avi-0674 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0674 https://cve.radiocsirt.org/vuln/euvd-2026-318398 EUVD-2026-318398 https://cve.radiocsirt.org/vuln/euvd-2026-318398 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8466 <p>Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing.</p> <p>cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into a Buffer binary with no upper-bound check. When cow_multipart:parse_headers/2 returns more or {more, Buffer2}, the function reads up to Length bytes (default 64 KB) from the request body and recurses with the enlarged buffer. There is no equivalent of the byte_size(Acc) &gt; Length guard present in the sibling function read_part_body/4. An unauthenticated attacker can send a multipart/form-data request whose body never yields a complete header section — for example, a body that never contains the advertised boundary delimiter, or one whose header lines never contain \r\n\r\n — and force the server process to accumulate memory linearly with the bytes the protocol layer is willing to deliver. A handful of concurrent such uploads is sufficient to exhaust BEAM memory.</p> <p>This issue affects cowboy from 2.0.0 before 2.15.0.</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing.</p> <p>cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into a Buffer binary with no upper-bound check. When cow_multipart:parse_headers/2 returns more or {more, Buffer2}, the function reads up to Length bytes (default 64 KB) from the request body and recurses with the enlarged buffer. There is no equivalent of the byte_size(Acc) &gt; Length guard present in the sibling function read_part_body/4. An unauthenticated attacker can send a multipart/form-data request whose body never yields a complete header section — for example, a body that never contains the advertised boundary delimiter, or one whose header lines never contain \r\n\r\n — and force the server process to accumulate memory linearly with the bytes the protocol layer is willing to deliver. A handful of concurrent such uploads is sufficient to exhaust BEAM memory.</p> <p>This issue affects cowboy from 2.0.0 before 2.15.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8466 https://cve.radiocsirt.org/vuln/ghsa-jfc2-q6qh-g5x8 <p><strong>Affected:</strong> Hex: cowboy</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing.</p> <p>cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into a Buffer binary with no upper-bound check. When cow_multipart:parse_headers/2 returns more or {more, Buffer2}, the function reads up to Length bytes (default 64 KB) from the request body and recurses with the enlarged buffer. There is no equivalent of the byte_size(Acc) &gt; Length guard present in the sibling function read_part_body/4. An unauthenticated attacker can send a multipart/form-data request whose body never yields a complete header section — for example, a body that never contains the advertised boundary delimiter, or one whose header lines never contain \r\n\r\n — and force the server process to accumulate memory linearly with the bytes the protocol layer is willing to deliver. A handful of concurrent such uploads is sufficient to exhaust BEAM memory.</p> <p>This issue affects cowboy from 2.0.0 before 2.15.0.</p> <p><strong>Affected:</strong> Hex: cowboy</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing.</p> <p>cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into a Buffer binary with no upper-bound check. When cow_multipart:parse_headers/2 returns more or {more, Buffer2}, the function reads up to Length bytes (default 64 KB) from the request body and recurses with the enlarged buffer. There is no equivalent of the byte_size(Acc) &gt; Length guard present in the sibling function read_part_body/4. An unauthenticated attacker can send a multipart/form-data request whose body never yields a complete header section — for example, a body that never contains the advertised boundary delimiter, or one whose header lines never contain \r\n\r\n — and force the server process to accumulate memory linearly with the bytes the protocol layer is willing to deliver. A handful of concurrent such uploads is sufficient to exhaust BEAM memory.</p> <p>This issue affects cowboy from 2.0.0 before 2.15.0.</p> https://cve.radiocsirt.org/vuln/ghsa-jfc2-q6qh-g5x8 https://cve.radiocsirt.org/vuln/msrc_cve-2026-8466 msrc_CVE-2026-8466 https://cve.radiocsirt.org/vuln/msrc_cve-2026-8466 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8466 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: erlang-cowboy, Ubuntu:18.04:LTS: erlang-cowboy, Ubuntu:20.04:LTS: erlang-cowboy, Ubuntu:22.04:LTS: erlang-cowboy, Ubuntu:24.04:LTS: erlang-cowboy, Ubuntu:25.10: erlang-cowboy, Ubuntu:26.04:LTS: erlang-cowboy</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into a Buffer binary with no upper-bound check. When cow_multipart:parse_headers/2 returns more or {more, Buffer2}, the function reads up to Length bytes (default 64 KB) from the request body and recurses with the enlarged buffer. There is no equivalent of the byte_size(Acc) &gt; Length guard present in the sibling function read_part_body/4. An unauthenticated attacker can send a multipart/form-data request whose body never yields a complete header section — for example, a body that never contains the advertised boundary delimiter, or one whose header lines never contain \r\n\r\n — and force the server process to accumulate memory linearly with the bytes the protocol layer is willing to deliver. A handful of concurrent such uploads is sufficient to exhaust BEAM memory. This issue affects cowboy from 2.0.0 before 2.15.0.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: erlang-cowboy, Ubuntu:18.04:LTS: erlang-cowboy, Ubuntu:20.04:LTS: erlang-cowboy, Ubuntu:22.04:LTS: erlang-cowboy, Ubuntu:24.04:LTS: erlang-cowboy, Ubuntu:25.10: erlang-cowboy, Ubuntu:26.04:LTS: erlang-cowboy</p> <p>Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows denial of service via unbounded buffer accumulation in multipart header parsing. cowboy_req:read_part/3 in src/cowboy_req.erl accumulates incoming request bytes into a Buffer binary with no upper-bound check. When cow_multipart:parse_headers/2 returns more or {more, Buffer2}, the function reads up to Length bytes (default 64 KB) from the request body and recurses with the enlarged buffer. There is no equivalent of the byte_size(Acc) &gt; Length guard present in the sibling function read_part_body/4. An unauthenticated attacker can send a multipart/form-data request whose body never yields a complete header section — for example, a body that never contains the advertised boundary delimiter, or one whose header lines never contain \r\n\r\n — and force the server process to accumulate memory linearly with the bytes the protocol layer is willing to deliver. A handful of concurrent such uploads is sufficient to exhaust BEAM memory. This issue affects cowboy from 2.0.0 before 2.15.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-8466