http4s-ember-core_2.13 vulnerabilities
1 known vulnerability in http4s-ember-core_2.13 from Org.http4s. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest first
- 8.2 High severity
http4s: Improper Handling of Highly Compressed Data (Data Amplification)
Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, an unauthenticated HTTP/2 peer can cause an out-of-memory denial of service in the Ember backend with HTTP/2 enabled. The Hpack wrapper in ember-core/shared/src/main/scala/org/http4