VULNRABLE / Vulnerability / GHSA-46q4-43ph-c6fr
GHSA-46q4-43ph-c6fr
HIGH LOW org.http4s:blaze-http_2.13 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
—
Source
GHSA
Summary
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
What this means
GHSA-46q4-43ph-c6fr is a high-severity vulnerability affecting org.http4s:blaze-http_2.13, rated CVSS 8. Published July 25, 2026.
View full advisory at GHSA →