VULNRABLE / Vulnerability / GHSA-7ppr-r889-mcf2
GHSA-7ppr-r889-mcf2
HIGH LOW org.http4s:http4s-blaze-server_2.13 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
—
Source
GHSA
Summary
blaze: Unbounded WebSocket message aggregation in http4s-blaze-server
What this means
GHSA-7ppr-r889-mcf2 is a high-severity vulnerability affecting org.http4s:http4s-blaze-server_2.13, rated CVSS 8. Published July 25, 2026.
View full advisory at GHSA →