Http4s Blaze vulnerabilities
- http4s blaze http4s-blaze-server: Unbounded WebSocket message aggregation 7.5 High
- http4s blaze blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass) 7.4 High
- http4s blaze, org.http4s blaze-http 2.13, blaze-http 3 +1 more +3 more blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser 7.4 High
- http4s blaze Unbounded connection acceptance leads to file handle exhaustion 7.5 High