Skip to content
OpenAdvisories

Vendor

http4s

31 known vulnerabilities.

Products

http4s 26 blaze 4 http4s-scala-xml 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-69212 Public exploit

    Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect

    Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-author…

    http4s http4s