VULNRABLE / Vulnerability / GHSA-mhvj-jhpq-885v

GHSA-mhvj-jhpq-885v

HIGH LOW org.http4s:http4s-blaze-server_2.13 GHSA

Exploit verdict: No active-exploit signal

CVSS Score
8
Severity
HIGH
EPSS
Source
GHSA

Summary

blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

What this means

GHSA-mhvj-jhpq-885v is a high-severity vulnerability affecting org.http4s:http4s-blaze-server_2.13, rated CVSS 8. Published July 25, 2026.

View full advisory at GHSA →