Skip to content
OpenAdvisories

Package · Maven

org.http4s:http4s-server_2.12

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2021-41084

    Response Splitting from unsanitized headers in http4s

    http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or request-splitting attacks when untrusted user input is used to create any of the following fields: Header names (`Header.name`å), Header valu…

    http4s http4s org.http4s:http4s-server_2.12 org.http4s:http4s-client_2.12 Maven
  • High 7.6
    CVE-2020-5280

    Local file inclusion vulnerability in http4s

    http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticc…

    http4s http4s org.http4s:http4s-server_2.12 Maven