Loïc Hoguin

Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1

Unbounded HPACK/QPACK prefixed-integer decoding in Cowlib causes memory-exhaustion DoS

Cowboy HTTP/1.1 max_headers Bypass via Duplicate Header Names Enables Memory Exhaustion

HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2

gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion

gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection

gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM

Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS

Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy