OR
Vendor
org.http4s
6
CVEs
0
On KEV
0
New 30D
Products
BL7.4
blaze-http_2.13
org.http4s
1 CVEs0 on KEV0 new
BL7.4
blaze-http_3
org.http4s
1 CVEs0 on KEV0 new
HT7.4
http4s-blaze-server_2.13
org.http4s
1 CVEs0 on KEV0 new
HT8.2
http4s-ember-core_2.12
org.http4s
1 CVEs0 on KEV0 new
HT8.2
http4s-ember-core_2.13
org.http4s
1 CVEs0 on KEV0 new
HT8.2
http4s-ember-core_3
org.http4s
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-73494 | BL blaze-http_2.13 org.http4s | 7.4 | Sep 14 | blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser |
| CVE-2026-54556 | HT http4s-ember-core_2.12 org.http4s | 8.2 | Aug 26 | Http4s: HTTP/2 Denial of Service with Ember Backend |