Skip to content
OpenAdvisories

Vendor

JuliaWeb

4 known vulnerabilities.

Products

HTTP.jl 2 GitForge.jl 1 GitHub.jl 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-61689

    HTTP.jl vulnerable to Header injection/Response splitting via header construction.

    HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTT…

    JuliaWeb HTTP.jl
  • High 7.7
    CVE-2025-52479

    HTTP.jl vulnerable to CR/LF Injection in URIs

    HTTP.jl provides HTTP client and server functionality for Julia, and URIs.jl parses and works with Uniform Resource Identifiers (URIs). URIs.jl prior to version 1.6.0 and HTTP.jl prior to version 1.10.17 allows the construction of URIs containing CR/LF charac…

    JuliaWeb HTTP.jl