Current section
2 Advisories
Jump to
Current section
2 Advisories
Plug.Cowboy vulnerable to unauthenticated remote DoS via HTTP/2 `:scheme` atom-table exhaustion
Affected Versions
References
- https://github.com/elixir-plug/plug_cowboy/security/advisories/GHSA-q8x4-x7mp-5vg2
- https://nvd.nist.gov/vuln/detail/CVE-2026-32688
- https://github.com/elixir-plug/plug_cowboy/commit/bfb34cb45eb354e56437f7023fb306de1bf9c19b
- https://cna.erlef.org/cves/CVE-2026-32688.html
- https://github.com/elixir-plug/plug_cowboy
- https://osv.dev/vulnerability/EEF-CVE-2026-32688
Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy
Affected Versions
Checksum
Dependency Config
mix.exs
rebar.config
Gleam
erlang.mk
Package Details
this version
67 490
yesterday
37 366
last 7 days
186 382
all time
137 872 024
