org.http4s:http4s-server_2.12 vulnerabilities

CVEs whose affected-version data names the org.http4s:http4s-server_2.12 package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-69201Medium· 5.9

1w ago

Http4s is a Scala interface for HTTP services

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResourceService and WebjarService decode each URL path segment but reject only segments exactly equal to an empty string, a dot, or two dots. A request contai…

▾ Sunlithttp4s · org.http4s:http4s-server_2.12EPSS 0.63%via NVD