Skip to content
OpenAdvisories

Package · Maven

org.http4s:http4s-ember-core_3

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-69204

    Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

    Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/1.1 does not reject messages containing both Transfer-Encoding and Content-Length, so an intermediary and Ember can select different body framing rules. When ember-serve…

    http4s http4s org.http4s:http4s-ember-core_2.13 org.http4s:http4s-ember-core_2.12 Maven