PkgSeer

Vulnerability GHSA-36w4-95hv-5vwg

Advisory details are being prepared in the background.

Medium Risk

5 months ago

gun_http2 has an Origin Validation Error vulnerability

2.0.0 - 2.3.0

Related Vulnerabilities

Other vulnerabilities affecting the same packages

cowboy and gun affected by an HTTP Request/Response Splitting vulnerability

1.0.0-pre.1 and 1.0.0-pre.2 and 1.0.0-pre.4 and 1.0.0-pre.5 and 1.0.0-pre.4b and 1.0.0 - 2.0.0-rc.1 and 2.0.0-rc.2 and 2.0.0 - 2.6.0 GHSA-w4f7-4cxr-rv3c

gun has an Unexpected Status Code or Return Value vulnerability

2.0.0 - 2.3.0 GHSA-2j82-37xg-f9wp

gun has an Uncontrolled Resource Consumption vulnerability

1.0.0 - 2.0.0-rc.1 and 2.0.0-rc.2 and 2.0.0 - 2.3.0 GHSA-r53j-fjj5-mv77

gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion

1.0.0 - 2.0.0-rc.1 and 2.0.0-rc.2 and 2.0.0 - 2.3.0 EEF-CVE-2026-43973

gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection

2.0.0 - 2.3.0 EEF-CVE-2026-43972

View all vulnerabilities for these packages

Impacted packages

gun

Timeline

Published

5 months ago

Fixed (2.4.0)

5 months ago

Last Modified

3 months ago