Package · Maven

org.http4s:http4s-blaze-server_3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2026-73493

http4s-blaze-server: Unbounded WebSocket message aggregation

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A client that comp…

http4s blaze org.http4s:http4s-blaze-server_2.13 org.http4s:http4s-blaze-server_2.12 Maven

Aug 12, 2026