org.http4s:http4s-server_2.11 vulnerabilities (Maven)

2 vulnerabilities.

• org.http4s:http4s-server_2.11 Maven Response Splitting from unsanitized headers in http4s CVE-2021-41084 Fix available 8.7 HighSeptember 21, 2021
• org.http4s:http4s-server_2.11 Maven Default CORS config allows any origin with credentials CVE-2021-39185 Fix available 9.1 CriticalSeptember 1, 2021