http4s Blaze Vulnerabilities

Http4s Blaze vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

12 August 2026

Vulnerability in Blaze Library Affects HTTP/1.1 Applications by HTTP Header Injection
CVE-2026-73495
Http4sBlaze7.4HIGH
WebSocket Message Fragmentation Issue in Http4s Blaze Server
CVE-2026-73493
Http4sBlaze7.5HIGH

2 February 2021

Unbounded connection acceptance leads to file handle exhaustion
CVE-2021-21293
Http4sBlaze7.5HIGH