Skip to content
OpenAdvisories

Package · Maven

org.http4s:http4s-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-22465

    Http4s has fatal error parsing User-Agent and Server headers

    Http4s is a Scala interface for HTTP services. Starting with version 0.1.0 and prior to versions 0.21.34, 0.22.15, 0.23.17, and 1.0.0-M38, the `User-Agent` and `Server` header parsers are susceptible to a fatal error on certain inputs. In http4s, modeled head…

    http4s http4s org.http4s:http4s-core org.http4s:http4s-core_2.13 Maven
  • Medium 5.8
    CVE-2021-32643

    StaticFile.fromUrl can leak presence of a directory

    Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server when the `URL` scheme is not `file://`, and the URL points to a fetchable resource under its scheme and authority. The function returns `F[Non…

    http4s http4s org.http4s:http4s-core Maven