Skip to content
OpenAdvisories

Product · org.http4s

http4s-ember-core_2.12

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-54556

    Http4s: HTTP/2 Denial of Service with Ember Backend

    Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, an unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in the Ember backend with HTTP/2 enabled. The Hpack wrapper in ember-core/shared/src/main/scala/org/http…

    http4s org.http4s http4s http4s-ember-core_2.13 Maven