CyberSecBulletin

JuliaWeb vulnerabilities

We track 2 vulnerabilities in JuliaWeb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 10, 2025.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest JuliaWeb vulnerabilities

  • 8.7 High severity

    HTTP.jl: Improper Neutralization of CRLF Sequences in HTTP Headers

    CVE-2025-61689JuliaWeb

    HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP

  • 7.7 High severity

    HTTP.jl: Improper Neutralization of CRLF Sequences

    CVE-2025-52479JuliaWeb

    HTTP.jl provides HTTP client and server functionality for Julia, and URIs.jl parses and works with Uniform Resource Identifiers (URIs). URIs.jl prior to version 1.6.0 and HTTP.jl prior to version 1.10.17 allows the construction of URIs containing CR/LF charact