https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-7790.htmlhttps://patchthecve.com/cve/CVE-2026-7790.htmlMon, 26 Oct 2026 18:10:00 +0000HIGH 7.5: Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation. The chunked transfer-encoding parser in cow_http_te accepts an unbounded number of hex digits in the chunk-size field. Each digit causes a bignum multiplication (Len * 16 + digit), https://patchthecve.com/cve/CVE-2026-43969.htmlhttps://patchthecve.com/cve/CVE-2026-43969.htmlMon, 26 Oct 2026 20:10:00 +0000LOW 3.2: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP request splitting and cookie smuggling via unvalidated cookie name and value fields. cow_cookie:cookie/1 in cowlib builds a client-side Cookie: request header from a list of name-value pairs whttps://patchthecve.com/cve/CVE-2026-43968.htmlhttps://patchthecve.com/cve/CVE-2026-43968.htmlMon, 26 Oct 2026 18:10:00 +0000MEDIUM 4.0: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values. cow_sse:event/1 in cowlib guards the id and event fields against \n but not against bare \r, and the internal prefix_lines/2 function