TI-2025-32606 CVE-2025-52479
HTTP.jl vulnerable to CR/LF Injection in URIs
Priority HIGH 67
HTTP.jl provides HTTP client and server functionality for Julia, and URIs.jl parses and works with Uniform Resource Identifiers (URIs).
JuliaWeb
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
JuliaWeb records in CISA KEVNo JuliaWeb vulnerabilities are listed in CISA KEV.
Records
4 records
TI-2025-38120 CVE-2025-61689
HTTP.jl vulnerable to Header injection/Response splitting via header construction.
Priority LOW 38
HTTP.jl is an HTTP client and server functionality for the Julia programming language.
Priority LOW 36
GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 5.9.1 lack input validation of input validation for user-provided values in certain functions.
Priority LOW 36
GitForge.jl is a unified interface for interacting with Git "forges." Versions prior to 0.4.3 lack input validation for user provided values in certain functions.