HT
Product
http4s
by http4s · last CVE Sep 15, 2026
20
CVEs
0
On KEV
9.2
Max CVSS
0
New 30D
Severity mix
Critical 1High 12Medium 7Low 0
Watch

Add http4s to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-69204
9.2
1%
Sep 15
Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)
Affected: < 0.23.35; >= 1.0.0-M1, < 1.0.0-M47
Showing 1