Ninenines Gun vulnerabilities
- ninenines gun gun HTTP/1.1 response buffer has no size limit allowing server-controlled memory exhaustion 8.7 High
- ninenines gun gun HTTP/2 PUSH_PROMISE authority not validated against connection origin allows cross-origin cookie injection 6.3 Medium
- ninenines gun gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM 8.7 High