blaze-http_3 vulnerabilities

1 known vulnerability in blaze-http_3 from Org.http4s. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  blaze: Inconsistent Interpretation of HTTP Requests

  CVE-2026-73494Sep 14, 2026Http4s

  blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Prior to 0.23.18 and from 1.0.0-M1 until 1.0.0-M42, five HTTP/1.1 conformance laxities in the hand-written Java parser under http/src/main/java/org/http4s/blaze/http/pars