Vulnerabilities

TI-2026-26959 CVE-2026-34715 · GHSA-x2w3-23jr-hrpf

ewe Has Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting)

MEDIUM 63

ewe is a Gleam web server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0034 Published 2026-04-02 Fixed in 3.0.6 CWE-113

TI-2026-25340 CVE-2026-32881 · GHSA-9w88-79f8-m3vp

MEDIUM 63

ewe is a Gleam web server.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00402 Published 2026-03-20 Fixed in 3.0.5 CWE-183

TI-2026-25333 CVE-2026-32873 · GHSA-4w98-xf39-23gp

HIGH 72

ewe is a Gleam web server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00623 Published 2026-03-20 Fixed in 3.0.5 CWE-825