Skip to content
OpenAdvisories

Vendor

http4k

9 known vulnerabilities.

Products

http4k 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-55875 Public exploit

    http4k has a potential XXE (XML External Entity Injection) vulnerability

    http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read loc…

    http4k http4k org.http4k:http4k-format-xml Maven