org.http4k:http4k-core
Maven · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact` | org.http4k:http4k-coreRed Hat Fuse 7/http4k-core | MavenRed Hat | متوسط | اصلاح گزارش شده | |
| http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS | org.http4k:http4k-core | Maven | زیاد | اصلاح گزارش شده | |
| http4k: `HmacSha256.hash` (despite the `Hmac` naming) computed a plain unkeyed digest; clarified by deprecation in favour of `Sha256.hash` / `Sha256.hmac` | org.http4k:http4k-core | Maven | زیاد | اصلاح گزارش شده | |
| http4k: BasicCookieStorage` (renamed `InsecureCookieStorage`) did not enforce RFC 6265 cookie scoping; new `DefaultCookieStorage` is now the default | org.http4k:http4k-core | Maven | متوسط | اصلاح گزارش شده |