What’s Vulnerable › Products

org.http4s blaze-http_3 vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your org.http4s blaze-http_3 version is affected

Latest org.http4s blaze-http_3 vulnerabilities

• CVE-2026-73494 — blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser (CVSS 7.4)