Skip to content
OpenAdvisories

Package · Maven

org.http4s:http4s-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2021-32643

    StaticFile.fromUrl can leak presence of a directory

    Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server when the `URL` scheme is not `file://`, and the URL points to a fetchable resource under its scheme and authority. The function returns `F[Non…

    http4s http4s org.http4s:http4s-core Maven