Skip to content
OpenAdvisories

Package · Maven

org.http4s:http4s-server_2.12

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2021-39185

    Default CORS config allows any origin with credentials

    Http4s is a minimal, idiomatic Scala interface for HTTP services. In http4s versions 0.21.26 and prior, 0.22.0 through 0.22.2, 0.23.0, 0.23.1, and 1.0.0-M1 through 1.0.0-M24, the default CORS configuration is vulnerable to an origin reflection attack. The mid…

    http4s http4s org.http4s:http4s-server_2.12 org.http4s:http4s-server_3 Maven