CVE-2026-43968: Cow Sse Erl Cwe 79 Cve 2026 43968cve-2026-43968-cow-sse-erl-cwe-79-cve-2026-43968
Binary data is validated or split on newline ("\n") without handling carriage returns ("\r" or "\r\n"). In protocols like SSE and HTTP, bare carriage returns are treated as line terminators and can allow CRLF injection or message splitting.