CVE-2026-43969Published
Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-43969 · Microsoft / collected KEV context
cve-program · CVE-2026-43969
- https://github.com/erlef/cowlib/commit/177953dd51540da11090666c1f007214127a1144
- https://cna.erlef.org/cves/CVE-2026-43969.html
- https://osv.dev/vulnerability/EEF-CVE-2026-43969
- https://github.com/ninenines/cowlib/commit/f017f8a0ecbffd5033d9ab49bf180186f7a523a7
- https://github.com/ninenines/cowlib/commit/c17fd73945ef536cccecc492d286fb6b6d1c3307
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.