Typelevel Http4s vulnerabilities
- http4s Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section 6.3 Medium
- http4s Http4s has fatal error parsing User-Agent and Server headers 7.5 High
- http4s Response Splitting from unsanitized headers in http4s 8.7 High
- http4s Default CORS config allows any origin with credentials 9.1 Critical
- http4s StaticFile.fromUrl can leak presence of a directory 5.8 Medium
- http4s Unbounded connection acceptance in http4s-blaze-server 7.5 High
- http4s Local file inclusion vulnerability in http4s 7.6 High