[ Vendor · 1 CVEs ]
http4s
CVEs affecting http4s published in the last 30 days, plus any http4s CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-61741 | 24 Sep 2026 | CVSS 9.3 | http4s-scala-xml has an XML External Entity (XXE) processing issuehttp4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these… | Fix |