Security
فارسی
All products

org.http4s:http4s-ember-core_3

Maven · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZECVE-2026-88975 · GHSA-GQ9P-F254-H286 org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
Http4s Ember HTTP/2: unbounded continuation frame accumulationCVE-2026-69218 · GHSA-CP4Q-FQW9-4HF6 org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
Http4s: Ember chunk parser lenience (TE.TE request smuggling)CVE-2026-69216 · GHSA-JRPM-956J-96JG org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven Medium Fix reported
Http4s Ember HTTP/2 has an unbounded outbound frame queueCVE-2026-69213 · GHSA-8F3Q-3JMV-7PRW org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)CVE-2026-69205 · GHSA-9998-894R-FWVR org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMSCVE-2026-69203 · GHSA-9VWC-PC8P-253Q org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
Http4s: DigestAuth allows replay of captured requestsCVE-2026-69206 · GHSA-9XWW-74XV-GJFP org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven Medium Fix reported
Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)CVE-2026-69204 · GHSA-8H4C-X2WG-6XP8 org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven Critical Fix reported
Http4s Ember HTTP/2: unbounded inbound body bufferingCVE-2026-69202 · GHSA-6M4X-PP6Q-5JMM org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
http4s has HTTP/2 Denial of Service with Ember BackendCVE-2026-54556 · GHSA-VMM3-XGCX-67HM org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven High Fix reported
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sectionCVE-2025-59822 · GHSA-WCWH-7GFW-5WRR org.http4s:http4s-ember-core_2.12org.http4s:http4s-ember-core_2.13 Maven Medium Fix reported