CVE-2026-43968: Cow Sse Erl Cwe 79 Cve 2026 43968

Binary data is validated or split on newline ("\n") without handling carriage returns ("\r" or "\r\n"). In protocols like SSE and HTTP, bare carriage returns are treated as line terminators and can allow CRLF injection or message splitting.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Generic
greprules fetch cve-2026-43968-cow-sse-erl-cwe-79-cve-2026-43968 --engine opengrep

Description

Binary data is validated or split on newline ("\n") without handling carriage returns ("\r" or "\r\n"). In protocols like SSE and HTTP, bare carriage returns are treated as line terminators and can allow CRLF injection or message splitting.