org.http4k:http4k-security-digest
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments | org.http4k:http4k-security-digest | Maven | Medium | Fix reported | |
| http4k: `DigestAuthProvider.verify` did not bind to request URI | org.http4k:http4k-security-digest | Maven | High | Fix reported | |
| http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI | org.http4k:http4k-security-digest | Maven | Medium | Fix reported |