org.http4s:http4s-client_3 vulnerabilities

CVEs whose affected-version data names the org.http4s:http4s-client_3 package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-69215Medium· 6.8

1w ago

Http4s is a Scala interface for HTTP services

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The CookieJar client middleware uses unanchored substring checks instead of RFC 6265 domain and path matching when deciding whether to attach a stored cookie.…

▾ Sunlithttp4s · org.http4s:http4s-client_2.12EPSS 0.43%via NVD