All products

org.http4s:http4s-client_3

Maven · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Http4s: CookieJar middleware matches by substring, leaking cookies cross-originCVE-2026-69215 · GHSA-GRH8-3P95-F9RR org.http4s:http4s-client_2.12org.http4s:http4s-client_2.13 Maven Medium Fix reported
Http4s: CookieJar middleware accepts arbitrary Set-Cookie domainCVE-2026-69214 · GHSA-WV64-J4FQ-5F9X org.http4s:http4s-client_2.12org.http4s:http4s-client_2.13 Maven Medium Fix reported
Response Splitting from unsanitized headersCVE-2021-41084 · GHSA-5VCM-3XC3-W7X3 org.http4s:http4s-client_2.12org.http4s:http4s-client_2.13 Maven High Fix reported