Packages

cowboy

2.20.0
2.20.0 2.19.0 2.18.0 2.17.0 2.16.1 2.16.0 2.15.0 2.14.2 2.14.1 2.14.0 2.13.0 2.12.0 2.11.0 2.10.0 2.9.0 2.8.0 2.7.0 2.6.3 2.6.2 retired 2.6.1 2.6.0 2.5.0 2.4.0 2.3.0 2.2.2 2.2.1 2.2.0 2.1.0 2.0.0 1.1.2 1.1.1 1.1.0 1.0.4 1.0.3 1.0.2 1.0.1 1.0.0

Small, fast, modern HTTP server.

Report package

Current section

3 Advisories

Jump to
Documentation
License
37 Versions
2 Dependencies
278 Dependants
3 Advisories
Files
Activity
EEF-CVE-2026-65624 CVE-2026-65624

Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

July 28, 2026
CVSS
?
6.9 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Versions

>= 2.0.0-pre.4 and < 2.18.0
GHSA-w4f7-4cxr-rv3c CVE-2026-43966 EEF-CVE-2026-43966

cowboy and gun affected by an HTTP Request/Response Splitting vulnerability

June 08, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Affected Versions

< 2.16.0
EEF-CVE-2026-8466 CVE-2026-8466 GHSA-jfc2-q6qh-g5x8

Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy

May 13, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 2.0.0 and < 2.15.0

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 50K 100K 150K 200K

this version

283 315

yesterday

96 553

last 7 days

496 248

all time

151 136 497

Last Updated

Oct 08, 2026

License

ISC

Build Tools

make rebar3

Publisher

essen essen

Links

Owners