TI-2023-08714 CVE-2023-22465 · GHSA-54w6-vxfh-fw7f
Http4s has fatal error parsing User-Agent and Server headers
Priority HIGH 72
Http4s is a Scala interface for HTTP services.
http4s
Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high23CVSS 7.0–8.9
Exploited now
http4s records in CISA KEVNo http4s vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Http4s · all components
TI-2025-37261 CVE-2025-59822 · GHSA-wcwh-7gfw-5wrr
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
Priority MEDIUM 61
Http4s is a Scala interface for HTTP services.
TI-2020-04336 CVE-2020-5280 · GHSA-66q9-f7ff-mmx6
Local file inclusion vulnerability in http4s
Priority MEDIUM 43
http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability.
TI-2021-17927 CVE-2021-41084 · GHSA-5vcm-3xc3-w7x3
Response Splitting from unsanitized headers in http4s
Priority MEDIUM 40
http4s is an open source scala interface for HTTP.
TI-2021-16571 CVE-2021-39185 · GHSA-52cf-226f-rhr6
Default CORS config allows any origin with credentials
Priority MEDIUM 40
Http4s is a minimal, idiomatic Scala interface for HTTP services.
TI-2021-04394 CVE-2021-21294 · GHSA-xhv5-w9c5-2r2w
Unbounded connection acceptance in http4s-blaze-server
Priority LOW 37
Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services.
TI-2021-12311 CVE-2021-32643 · GHSA-6h7w-fc84-x7p6
StaticFile.fromUrl can leak presence of a directory
Priority LOW 29
Http4s is a Scala interface for HTTP services.