.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

cowlib 2.19.0 vulnerabilities

8 advisories known · cowlib@2.19.0 · 4 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 2.19.0

SEVERITYADVISORYPUBLISHED

Lowcowlib: Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1GHSA-g2wm-735q-3f56CVE-2026-43969EEF-CVE-2026-43969Affected >=2.9.0 <2.21.0Fixed in 2.21.0OSV source ↗6 months ago

UnknownUnbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustionEEF-CVE-2026-113431CVE-2026-113431Affected >=2.7.0 <2.22.0Fixed in 2.22.0OSV source ↗4 days ago

UnknownLink Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1EEF-CVE-2026-43971CVE-2026-43971Affected >=2.9.0 <2.20.0Fixed in 2.20.0OSV source ↗3 months ago

UnknownHTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2EEF-CVE-2026-43966CVE-2026-43966GHSA-w4f7-4cxr-rv3cAffected >=2.9.0 <2.22.0Fixed in 2.22.0OSV source ↗5 months ago

Does not affect 2.19.0

SEVERITYADVISORYPUBLISHED

Highcowlib: Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY FrameGHSA-84f2-rp86-235pCVE-2026-43970EEF-CVE-2026-43970Affected >=0.1.0 <2.16.1Fixed in 2.16.1OSV source ↗6 months ago

High cowlib cow_http_te module: Uncontrolled Resource Consumption vulnerability allows Excessive AllocationGHSA-32p9-57cr-4x65CVE-2026-7790EEF-CVE-2026-7790Affected >=0.6.0 <2.16.1Fixed in 2.16.1OSV source ↗6 months ago

Mediumninenines cowlib: Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability allows SSE event splitting and injection via unvalidated field valuesGHSA-hv23-4qp7-8c8rCVE-2026-43968EEF-CVE-2026-43968Affected >=2.6.0 <2.16.1Fixed in 2.16.1OSV source ↗6 months ago

UnknownUnbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoSEEF-CVE-2026-59248CVE-2026-59248Affected >=2.0.0-pre.1 <2.19.0Fixed in 2.19.0OSV source ↗3 months ago