Org.http4s - vulnerabilities (CVEs)

2 CVEs in 6 products, 0 in the last 30 days, newest from 2026-09-14.

Products

• Blaze-http 2.13 - 1 CVEs
• Blaze-http 3 - 1 CVEs
• Http4s-blaze-server 2.13 - 1 CVEs
• Http4s-ember-core 2.12 - 1 CVEs
• Http4s-ember-core 2.13 - 1 CVEs
• Http4s-ember-core 3 - 1 CVEs

Newest CVEs of Org.http4s

• CVE-2026-73494 - CVSS 7.4 (high), 2026-09-14: blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1…
• CVE-2026-54556 - CVSS 8.2 (high), 2026-08-26: Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, an unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in…