ninenines
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 11, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion
HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2
gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion
gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection
gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM
CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1
Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS
Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1
Monitor ninenines in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.