Skip to content

org.http4s:blaze-http_3 vulnerabilities (Maven)

2 vulnerabilities.

org.http4s:blaze-http_3 Mavenblaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)CVE-2026-73495Fix available7.4 HighJuly 24, 2026
org.http4s:blaze-http_3 Mavenblaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parserCVE-2026-73494Fix available7.4 HighJuly 24, 2026