Log in Start free

org.http4s

Products

ProductCVEsExploitedLatest
blaze-http_2.131–Sep 14, 2026
blaze-http_31–Sep 14, 2026
http4s-blaze-server_2.131–Sep 14, 2026
http4s-ember-core_2.121–Aug 26, 2026
http4s-ember-core_2.131–Aug 26, 2026
http4s-ember-core_31–Aug 26, 2026

Exploited and recent CVEs

  • CVE-2026-73494 High 7.4 blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser 0.6%
  • CVE-2026-73494 High 7.4 blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser 0.6%
  • CVE-2026-73494 High 7.4 blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser 0.6%
  • CVE-2026-54556 High 8.2 Http4s: HTTP/2 Denial of Service with Ember Backend 0.5%
  • CVE-2026-54556 High 8.2 Http4s: HTTP/2 Denial of Service with Ember Backend 0.5%
  • CVE-2026-54556 High 8.2 Http4s: HTTP/2 Denial of Service with Ember Backend 0.5%