Skip to content
OpenAdvisories

Product · org.http4s

blaze-http_2.13

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-73494

    blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

    blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1 conformance laxities in the hand-written Java parser under http/src/main/java/org/http4s/blaze/http/par…

    http4s org.http4s blaze blaze-http_3 Maven