PatchTheCVEninenines vulnerabilities
Recent CVEs affecting ninenines products. 7 tracked.
ninenines has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-06-08. Highest priority: CVE-2026-43974 (score 42/100).
- CVE-2026-43969 LOW 3.2 UPGRADE Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows HTTP req
- CVE-2026-7790 HIGH 7.5 UPGRADE Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allo
- CVE-2026-43968 MEDIUM 4.0 UPGRADE Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE even
- CVE-2026-43966 MEDIUM 5.3 UPGRADE Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in
- CVE-2026-43974 HIGH 7.5 UPGRADE Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTT
- CVE-2026-43973 HIGH 7.5 UPGRADE Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server t
- CVE-2026-43972 HIGH 7.2 UPGRADE Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection
FAQ
How do I fix ninenines vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ninenines being exploited right now?
None of the tracked ninenines CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ninenines CVE should I patch first?
CVE-2026-43974 currently ranks highest (42/100): Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTT.