Http4k vulnerabilities
Products
- Http4k 9
Newest
- http4k http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity 8.2 High
- http4k http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution 8.2 High
- http4k http4k: `DigestAuthProvider.verify` did not bind to request URI 8.1 High
- http4k http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI 6.5 Medium
- http4k http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS 7.5 High
- http4k http4k before 6.48.0.0 Digest Authentication Replay Protection Bypass 8.2 High
- http4k http4k before 6.48.0.0 Cookie Scoping Bypass via BasicCookieStorage 8.3 High
- http4k http4k before 6.49.0.0 Host Header Routing Bypass via reverseProxy 6.3 Medium
- http4k http4k has a potential XXE (XML External Entity Injection) vulnerability 9.8 Critical