Ninenines Gun — known CVE vulnerabilities

Every CVE whose affected-product data names Ninenines Gun, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-43973 — CVSS 7.5 (high): Uncontrolled Resource Consumption vulnerability in ninenines gun (gun_http module) allows a malicious server to exhaust client memory via…
• CVE-2026-43974 — CVSS 7.5 (high): Unexpected Status Code or Return Value vulnerability in ninenines gun (gun_http module) allows a malicious HTTP server to force the client…
• CVE-2026-43972 — CVSS 7.2 (high): Origin Validation Error vulnerability in ninenines gun (gun_http2 module) allows cross-origin cookie injection via unvalidated HTTP/2…