Package · Maven

org.http4s:http4s-ember-server_3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2026-69208

Http4s: DigestAuth nonce map grows unbounded

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, the DigestAuth server middleware removes fresh nonces and stops eviction at the first stale nonce because its stale-nonce comparison is inverted. On an application that protects at…

http4s http4s org.http4s:http4s-ember-server_2.13 org.http4s:http4s-ember-server_2.12 Maven

Sep 15, 2026