Package · Maven

org.http4s:http4s-client_3

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.7

CVE-2021-41084

Response Splitting from unsanitized headers in http4s

http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or request-splitting attacks when untrusted user input is used to create any of the following fields: Header names (`Header.name`å), Header valu…

http4s http4s org.http4s:http4s-server_2.12 org.http4s:http4s-client_2.12 Maven

Sep 21, 2021