org.http4k:http4k-security-digest vulnerabilities

CVEs whose affected-version data names the org.http4k:http4k-security-digest package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

GHSA-c7jm-38gq-h67hMedium

http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments

http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments

▾ Sunlithttp4k · org.http4k:http4k-security-digestvia GHSA

org.http4k:http4k-security-digest vulnerabilities (CVEs) · VulnSea