BL
Product
blaze
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add blaze to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73493 | 7.5 | Aug 12 | http4s-blaze-server: Unbounded WebSocket message aggregation Affected: < 0.23.18; >= 1.0.0-M1, < 1.0.0-M42 |
| CVE-2026-73494 | 7.4 | Sep 14 | blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser Affected: < 0.23.18; >= 1.0.0-M1, < 1.0.0-M42 |
| CVE-2026-73495 | 7.4 | Aug 12 | blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass) Affected: < 0.23.18; >= 1.0.0-M1, < 1.0.0-M42 |
Showing 3