Skip to content
OpenAdvisories

Package · Maven

org.http4k:http4k-security-digest

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-54148

    http4k: `DigestAuthProvider.verify` did not bind to request URI

    http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest does not compare the uri parameter in an Authorization: Digest response with the actual request URL. An…

    http4k http4k org.http4k:http4k-security-digest Maven