Skip to content
OpenAdvisories

Package · Maven

org.http4s:http4s-server_3

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-69201

    Http4s: ResourceService and Webjar Service path escape via percent-encoded separators

    Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segment but reject only segments exactly equal to an empty string, a dot, or two dots. A request containing percent-encoded s…

    http4s http4s org.http4s:http4s-server_2.12 org.http4s:http4s-server_3 Maven