HTTP.jl vulnerabilities

2 known vulnerabilities in HTTP.jl from JuliaWeb. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  HTTP.jl: Improper Neutralization of CRLF Sequences in HTTP Headers

  CVE-2025-61689Oct 10, 2025JuliaWeb

  HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-based header injection and response splitting. This enables HTTP

• 7.7 High severity

  HTTP.jl: Improper Neutralization of CRLF Sequences

  CVE-2025-52479Jun 25, 2025JuliaWeb

  HTTP.jl provides HTTP client and server functionality for Julia, and URIs.jl parses and works with Uniform Resource Identifiers (URIs). URIs.jl prior to version 1.6.0 and HTTP.jl prior to version 1.10.17 allows the construction of URIs containing CR/LF charact