org.http4s:http4s-ember-core_2.12 vulnerabilities (Maven)
11 vulnerabilities.
org.http4s:http4s-ember-core_2.12MavenHttp4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE7.5 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s: DigestAuth allows replay of captured requests5.9 Mediumorg.http4s:http4s-ember-core_2.12MavenHttp4s Ember HTTP/2: unbounded inbound body buffering7.5 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s Ember HTTP/2: unbounded continuation frame accumulation7.5 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s Ember HTTP/2: does not enforce SETTINGS_MAX_CONCURRENT_STREAMS7.5 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s: Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)8.7 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s Ember HTTP/2: unbounded outbound frame queue7.5 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s: Ember chunk parser lenience (TE.TE request smuggling)5.4 Mediumorg.http4s:http4s-ember-core_2.12MavenHttp4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)9.2 Criticalorg.http4s:http4s-ember-core_2.12MavenHttp4s: HTTP/2 Denial of Service with Ember Backend8.2 Highorg.http4s:http4s-ember-core_2.12MavenHttp4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section6.3 Medium