org.http4s:http4s-server_2.13 vulnerabilities (Maven)

3 vulnerabilities.

• org.http4s:http4s-server_2.13 Maven Http4s: ResourceService and Webjar Service path escape via percent-encoded separators CVE-2026-69201 Fix available 5.9 MediumSeptember 15, 2026
• org.http4s:http4s-server_2.13 Maven Response Splitting from unsanitized headers in http4s CVE-2021-41084 Fix available 8.7 HighSeptember 21, 2021
• org.http4s:http4s-server_2.13 Maven Default CORS config allows any origin with credentials CVE-2021-39185 Fix available 9.1 CriticalSeptember 1, 2021