Threats tagged 'ghsa-fg6p-m67f-wm9v'

A resource allocation vulnerability in ninenines cowboy from version 2.18.0 onward allows unauthenticated remote attackers to exhaust server memory by sending excessive data on HTTP/1.1 keep-alive connections. The issue arises because the server appends incoming data to a buffer without limits while a request handler is running, potentially causing out-of-memory conditions in the Erlang VM.