com.slack.api:bolt-http4k (>=1.4.0-rc1, <=1.5.0-m1), org.http4k:http4k-aws (3.278.0) +51 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.278.0)

org.http4k:http4k-core MAVEN version 3.278.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - com.slack.api:bolt-http4k =1.4.0-rc1, =1.5.0-m1 - org.http4k:http4k-aws 3.278.0 - org.http4k:http4k-client-apache...

org.http4k:http4k-aws (3.284.0), org.http4k:http4k-client-apache (3.284.0) +50 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.284.0)

org.http4k:http4k-core MAVEN version 3.284.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.284.0 - org.http4k:http4k-client-apache 3.284.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.285.0), org.http4k:http4k-client-apache (3.285.0) +50 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.285.0)

org.http4k:http4k-core MAVEN version 3.285.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.285.0 - org.http4k:http4k-client-apache 3.285.0 - org.http4k:http4k-client-apache-async...

com.slack.api:bolt-http4k (>=1.5.0-rc1, <=1.5.3), org.http4k:http4k-aws (3.285.2) +75 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.285.2)

org.http4k:http4k-core MAVEN version 3.285.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - com.slack.api:bolt-http4k =1.5.0-rc1, =2.6.0.0, =2.7.0.0, =2.6.0.0, =2.7.0.0, =2.7.0.0, =2.7.1.0 and more Source...

com.apollographql.execution:apollo-execution-http4k (>=0.0.2, <=0.1.1), com.apollographql.execution:apollo-execution-http4k-jvm (>=0.0.2, <=0.1.1) +333 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (>=5.0.0.0, <=5.41.0.0)

org.http4k:http4k-core MAVEN version =5.0.0.0, =0.0.2, =0.0.2, =0.0.1, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =0.5.0, =1.30.0, =0.1, =0.1.1 and more Source cves: CVE-2026-100725 Source advisory: OSV:GHSA-PR33-38XX-6R26...

com.apollographql.execution:apollo-execution-http4k (0.1.2), com.apollographql.execution:apollo-execution-http4k-jvm (0.1.2) +355 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (>=6.0.0.0, <=6.47.2.0)

org.http4k:http4k-core MAVEN version =6.0.0.0, =0.6.0, =0.1.1, =0.1.1, =0.1.1, =2.1.2-beta1, =4.0.0-rc27, =2.1.2-beta1, =2.1.2-beta1, =4.0.0-rc27, =2.1.2-beta1, =2.1.2-beta1, =5.3.1 and more Source cves: CVE-2026-100725 Source advisory: OSV:GHSA-PR33-38XX-6R26...

com.apollographql.execution:apollo-execution-http4k (0.1.2), com.apollographql.execution:apollo-execution-http4k-jvm (0.1.2) +355 more potentially affected by unknown CVE via org.http4k:http4k-core (>=6.0.0.0, <=6.47.2.0)

org.http4k:http4k-core MAVEN version =6.0.0.0, =0.6.0, =0.1.1, =0.1.1, =0.1.1, =2.1.2-beta1, =4.0.0-rc27, =2.1.2-beta1, =2.1.2-beta1, =4.0.0-rc27, =2.1.2-beta1, =2.1.2-beta1, =5.3.1 and more Source cves: unknown CVE Source advisory: GHSA-PR33-38XX-6R26...

org.http4k:http4k-aws (3.146.0), org.http4k:http4k-client-apache (3.146.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.146.0)

org.http4k:http4k-core MAVEN version 3.146.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.146.0 - org.http4k:http4k-client-apache 3.146.0 - org.http4k:http4k-client-apache-async...

org.http4k.pro:http4k-incubator-db (v6.4.1.0), org.http4k.pro:http4k-mcp-sdk (v6.4.1.0) +173 more potentially affected by unknown CVE via org.http4k:http4k-core (v6.4.1.0)

org.http4k:http4k-core MAVEN version v6.4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k.pro:http4k-incubator-db v6.4.1.0 - org.http4k.pro:http4k-mcp-sdk v6.4.1.0 -...

org.http4k:http4k-format-argo (0.21.0), org.http4k:http4k-format-jackson (0.21.0) +2 more potentially affected by unknown CVE via org.http4k:http4k-core (0.21.0)

org.http4k:http4k-core MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-format-argo 0.21.0 - org.http4k:http4k-format-jackson 0.21.0 - org.http4k:http4k-server-netty...

org.http4k:http4k-client-apache (0.22.0), org.http4k:http4k-contract (0.22.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (0.22.0)

org.http4k:http4k-core MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 0.22.0 - org.http4k:http4k-contract 0.22.0 - org.http4k:http4k-format-argo 0.22.0 ...

org.http4k:http4k-client-apache (1.0.0), org.http4k:http4k-contract (1.0.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.0.0)

org.http4k:http4k-core MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.0.0 - org.http4k:http4k-contract 1.0.0 - org.http4k:http4k-format-argo 1.0.0 -...

org.http4k:http4k-client-apache (1.2.0), org.http4k:http4k-contract (1.2.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.2.0)

org.http4k:http4k-core MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.2.0 - org.http4k:http4k-contract 1.2.0 - org.http4k:http4k-format-argo 1.2.0 -...

org.http4k:http4k-client-apache (1.3.0), org.http4k:http4k-contract (1.3.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.3.0)

org.http4k:http4k-core MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.3.0 - org.http4k:http4k-contract 1.3.0 - org.http4k:http4k-format-argo 1.3.0 -...

org.http4k:http4k-client-apache (1.4.0), org.http4k:http4k-contract (1.4.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.4.0)

org.http4k:http4k-core MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.4.0 - org.http4k:http4k-contract 1.4.0 - org.http4k:http4k-format-argo 1.4.0 -...

org.http4k:http4k-client-apache (1.5.0), org.http4k:http4k-contract (1.5.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.5.0)

org.http4k:http4k-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.5.0 - org.http4k:http4k-contract 1.5.0 - org.http4k:http4k-format-argo 1.5.0 -...

org.http4k:http4k-client-apache (1.8.0), org.http4k:http4k-contract (1.8.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.8.0)

org.http4k:http4k-core MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.8.0 - org.http4k:http4k-contract 1.8.0 - org.http4k:http4k-format-argo 1.8.0 -...

org.http4k:http4k-client-apache (1.9.0), org.http4k:http4k-contract (1.9.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.9.0)

org.http4k:http4k-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.9.0 - org.http4k:http4k-contract 1.9.0 - org.http4k:http4k-format-argo 1.9.0 -...

org.http4k:http4k-client-apache (1.11.0), org.http4k:http4k-contract (1.11.0) +6 more potentially affected by unknown CVE via org.http4k:http4k-core (1.11.0)

org.http4k:http4k-core MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.11.0 - org.http4k:http4k-contract 1.11.0 - org.http4k:http4k-format-argo 1.11.0 ...

org.http4k:http4k-client-apache (1.13.0), org.http4k:http4k-client-okhttp (1.13.0) +7 more potentially affected by unknown CVE via org.http4k:http4k-core (1.13.0)

org.http4k:http4k-core MAVEN version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.13.0 - org.http4k:http4k-client-okhttp 1.13.0 - org.http4k:http4k-contract 1.13....