.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

cowboy 2.16.0 vulnerabilities

4 advisories known · cowboy@2.16.0 · 1 affects this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 2.16.0

SEVERITYADVISORYPUBLISHED

UnknownCowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory ExhaustionEEF-CVE-2026-65624CVE-2026-65624Affected >=2.0.0-pre.4 <2.18.0Fixed in 2.18.0OSV source ↗3 months ago

Does not affect 2.16.0

SEVERITYADVISORYPUBLISHED

HighCowboy: Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboyGHSA-jfc2-q6qh-g5x8CVE-2026-8466EEF-CVE-2026-8466Affected >=2.0.0 <2.15.0Fixed in 2.15.0OSV source ↗6 months ago

Mediumcowboy and gun affected by an HTTP Request/Response Splitting vulnerabilityGHSA-w4f7-4cxr-rv3cCVE-2026-43966EEF-CVE-2026-43966Affected <2.16.0Fixed in 2.16.0OSV source ↗5 months ago

UnknownCowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory ExhaustionEEF-CVE-2026-115701CVE-2026-115701Affected >=2.18.0 <2.21.0Fixed in 2.21.0OSV source ↗4 days ago