All products

Red Hat Fuse 7/http4k-core

Red Hat · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact`CVE-2026-100724 · GHSA-JRPC-7VXP-69P6 org.http4k:http4k-coreRed Hat Fuse 7/http4k-core MavenRed Hat Medium Fix reported
org.http4k/http4k-core: http4k-core: Sensitive information disclosure via improper cookie scopingCVE-2026-100725 Red Hat Fuse 7/http4k-core Red Hat Medium No fix reported