org.http4s vulnerabilities
2 published CVEs name org.http4s among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-73494
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser
http4s · blaze
High7.4 - CVE-2026-54556
Http4s: HTTP/2 Denial of Service with Ember Backend
http4s · http4s
High8.2