All products

org.http4s:blaze-http_3

Maven · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parserCVE-2026-73494 · GHSA-MHVJ-JHPQ-885V org.http4s:blaze-http_2.13org.http4s:blaze-http_3 Maven High Fix reported
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)CVE-2026-73495 · GHSA-46Q4-43PH-C6FR org.http4s:blaze-http_2.12org.http4s:blaze-http_2.13 Maven High Fix reported