JuliaWeb
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HTTP.jl | 2 | – | Oct 10, 2025 |
| GitForge.jl | 1 | – | Jun 25, 2025 |
| GitHub.jl | 1 | – | Jun 25, 2025 |
Exploited and recent CVEs
- CVE-2025-61689 HTTP.jl vulnerable to Header injection/Response splitting via header construction. 0.3%
- CVE-2025-52569 GitHub.jl lacks validation for user-provided fields 0.5%
- CVE-2025-52479 HTTP.jl vulnerable to CR/LF Injection in URIs 0.4%
- CVE-2025-50178 GitForge.jl lacks validation for user provided fields 0.5%