PatchTheCVEgun vulnerabilities and fixes
Recent CVEs affecting gun, with upgrade or downgrade steps. 3 tracked.
gun has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-06-08. Highest priority: CVE-2026-43974 (score 42/100).
- CVE-2026-43974 HIGH 7.5 UPGRADE Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTT
- CVE-2026-43973 HIGH 7.5 UPGRADE Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server t
- CVE-2026-43972 HIGH 7.2 UPGRADE Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection
FAQ
How do I fix gun vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is gun being exploited right now?
None of the tracked gun CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which gun CVE should I patch first?
CVE-2026-43974 currently ranks highest (42/100): Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTT.