Peter Ullrich

HTTP/2 frame size limit checked after body is buffered in bandit

Unbounded chunk-size hex digits in cowlib cause quadratic CPU and memory DoS

Decompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame

Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy

CR Injection in SSE Encoder Enables Event Splitting via cow_sse:event/1

Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe

Quadratic fragment-name uniqueness check causes denial of service in absinthe

Long-poll NDJSON body splitting causes unbounded memory allocation in Phoenix

Atom table exhaustion via HTTP/2 :scheme pseudo-header in plug_cowboy