Read the docs

ninenines

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ninenines records in CISA KEV

No ninenines vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cowlib 4 records MEDIUM Gun 3 records MEDIUM

Records

4 records in Cowlib · all components

TI-2026-32013 CVE-2026-43968 · GHSA-hv23-4qp7-8c8r

CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

Priority LOW 28

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00266 Published 2026-05-11 Fixed in 2.16.1 CWE-93
TI-2026-32011 CVE-2026-43966 · GHSA-w4f7-4cxr-rv3c

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

Priority LOW 28

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines cowlib allows HTTP response splitting via non-VCHAR bytes in structured-fields string values.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00259 Published 2026-06-08 Fixed in 2.16.0 CWE-113
Open these records in search →