Package · Maven

org.http4s:http4s-scala-xml_3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.3

CVE-2026-61741

http4s-scala-xml has an XML External Entity (XXE) processing issue

http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders used a `javax.xml.parsers.SAXParserFactory` obtained from `SAXParserFactory.newInstance` without any s…

http4s http4s-scala-xml org.http4s:http4s-scala-xml_2.13 org.http4s:http4s-scala-xml_2.12 Maven

Sep 24, 2026