Packages

cowlib

2.21.0
2.21.0 2.20.0 2.19.0 2.18.0 2.17.1 2.17.0 2.16.1 2.16.0 2.15.0 2.14.0 2.13.0 2.12.1 2.12.0 2.11.0 2.10.1 2.10.0 2.9.1 2.9.0 2.8.0 2.7.3 2.7.2 retired 2.7.1 retired 2.7.0 2.6.0 2.5.1 2.5.0 2.4.0 2.3.0 2.2.1 2.2.0 2.1.0 2.0.1 2.0.0 1.3.0 1.2.0 1.1.0 1.0.2 1.0.1 1.0.0

Support library for manipulating Web protocols.

Security advisory: This version has known vulnerabilities. View advisories
Report package

Current section

7 Advisories

Jump to
Documentation
License
39 Versions
0 Dependencies
38 Dependants
7 Advisories
Files
Activity
EEF-CVE-2026-43971 CVE-2026-43971

Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1

August 18, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 2.9.0 and < 2.20.0
EEF-CVE-2026-59248 CVE-2026-59248

Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

July 28, 2026
CVSS
?
8.7 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 2.0.0-pre.1 and < 2.19.0
EEF-CVE-2026-43966 CVE-2026-43966 GHSA-w4f7-4cxr-rv3c

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

June 08, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 2.9.0
EEF-CVE-2026-43970 CVE-2026-43970 GHSA-84f2-rp86-235p

Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

May 13, 2026
CVSS
?
8.2 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.1.0 and < 2.16.1
EEF-CVE-2026-7790 CVE-2026-7790 GHSA-32p9-57cr-4x65

Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS

May 11, 2026
CVSS
?
8.7 / 10.0 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 0.6.0 and < 2.16.1
EEF-CVE-2026-43969 CVE-2026-43969 GHSA-g2wm-735q-3f56

Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

May 11, 2026
CVSS
?
2.1 / 10.0 Low
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 2.9.0 and < 2.21.0 >= 2.9.0 and <= 2.16.1
EEF-CVE-2026-43968 CVE-2026-43968 GHSA-hv23-4qp7-8c8r

CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

May 11, 2026
CVSS
?
6.3 / 10.0 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

Affected Versions

>= 2.6.0 and < 2.16.1

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions
0 50K 100K 150K 200K

this version

347 414

yesterday

88 026

last 7 days

521 158

all time

107 200 325

Last Updated

Oct 08, 2026

License

ISC

Build Tools

make rebar3

Publisher

essen essen

Links

Owners