PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
cowlib Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion Unknown 3 hours ago 3 hours ago
cowlib HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 Unknown 5 months ago 23 days ago
cowlib Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 Unknown 5 months ago 28 days ago
cowlib Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 Unknown 2 months ago 1 month ago
cowlib Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame Unknown 5 months ago 1 month ago
cowlib Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS Unknown 5 months ago 1 month ago
cowlib CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1 Unknown 5 months ago 1 month ago
cowlib Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS Unknown 3 months ago 3 months ago
cowlib cowlib: Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1 Low Risk 3.2 5 months ago 5 months ago
cowlib ninenines cowlib: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability allows SSE event splitting and injection via unvalidated field values Medium Risk 4.0 5 months ago 5 months ago
cowlib cowlib: Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame High Risk 8.0 5 months ago 5 months ago
cowlib cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive Allocation High Risk 8.0 5 months ago 5 months ago
Data courtesy of OSV.dev
Page 1