Known CVE vulnerabilities and GitHub Security Advisories affecting the Hex package ewe, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (3)
CVE-2026-32873 — CVSS 7.5 (high): ewe is a Gleam web server. Versions 0.8.0 through 3.0.4 contain a bug in the handle_trailers function where rejected trailer headers…
CVE-2026-32881 — CVSS 5.3 (medium): ewe is a Gleam web server. ewe is a Gleam web server. Versions 0.6.0 through 3.0.4 are vulnerable to authentication bypass or spoofed…
CVE-2026-34715 — CVSS 5.3 (medium): ewe is a Gleam web server. Prior to version 3.0.6, the encode_headers function in src/ewe/internal/encoder.gleam directly interpolates…