org.http4k:http4k-core vulnerabilities (Maven)
4 vulnerabilities.
-
org.http4k:http4k-coreMaven http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS 7.5 High -
org.http4k:http4k-coreMaven http4k before 6.48.0.0 Cookie Scoping Bypass via BasicCookieStorage 8.3 High -
org.http4k:http4k-coreMaven http4k: `HmacSha256.hash` (despite the `Hmac` naming) computed a plain unkeyed digest; clarified by deprecation in favour of `Sha256.hash` / `Sha256.hmac` 8.2 High -
org.http4k:http4k-coreMaven http4k before 6.49.0.0 Host Header Routing Bypass via reverseProxy 6.3 Medium