EUVD-2020-0333

Malware in sbrugna...

EUVD-2021-1987

Malware in sbrugna...

EUVD-2021-1978

Malware in sbrugna...

EUVD-2021-0971

Malware in sbrugna...

EUVD-2023-0335

Malicious code in bioql PyPI...

CVE-2025-59822

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

CVE-2025-59822

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

CVE-2025-59822

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

ai.starlake:quack-on-demand_3 (>=0.1.0, <=0.4.0), com.47deg:energy-monitor-persistence-app_3 (0.2.0) +179 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_3 (>=0.22.0-m8, <=0.23.30)

org.http4s:http4s-ember-core3 MAVEN version =0.22.0-m8, =0.1.0, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.1, =1.0.0, =0.0.0-3-cca5341b, =7.1.0, =7.1.1 and more Source cves: CVE-2025-59822 Source advisory: MEND:CVE-2025-59822...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m44)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2025-59822 Source advisory: MEND:CVE-2025-59822...

CVE-2025-59822

CVE-2025-59822 affects http4s (Scala). Versions 1.0.0-M1 up to just before 1.0.0-M45 and before 0.23.31 are vulnerable to HTTP Request Smuggling caused by improper handling of the HTTP trailer section. The vulnerability can allow bypassing front‑end security controls, abusing active user sessions...

CVE-2025-59822 Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

CVE-2025-59822 Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

CVE-2025-59822 Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls...

ai.starlake:quack-on-demand_3 (>=0.1.0, <=0.4.0), com.47deg:energy-monitor-persistence-app_3 (0.2.0) +179 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_3 (>=0.22.0-m8, <=0.23.30)

org.http4s:http4s-ember-core3 MAVEN version =0.22.0-m8, =0.1.0, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.1, =1.0.0, =0.0.0-3-cca5341b, =7.1.0, =7.1.1 and more Source cves: CVE-2025-59822 Source advisory: SNYK:JAVA-ORGHTTP4S-13019560...

com.armanbilge:feral-lambda-cloudformation-custom-resource_2.12 (>=0.1-f497734, <=0.1-7d4b1e7), com.armanbilge:sbt-bundlemon_2.12_1.0 (0.1.4) +69 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_2.12 (>=0.10.0-m10, <=0.23.30)

org.http4s:http4s-ember-core2.12 MAVEN version =0.10.0-m10, =0.1-f497734, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.21.0, =0.20.4, =0.21.0, =0.21.0, =0.22.1 and more Source cves: CVE-2025-59822 Source advisory: GHSA-WCWH-7GFW-5WRR...

dev.i10416:slackapis-core_sjs1_2.13 (>=0.0.1, <=0.0.2), org.http4s:http4s-ember-client_sjs1_2.13 (>=1.0.0-m24, <=1.0.0-m44) +1 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_sjs1_2.13 (>=1.0.0-m24, <=1.0.0-m44)

org.http4s:http4s-ember-coresjs12.13 MAVEN version =1.0.0-m24, =0.0.1, =1.0.0-m24, =1.0.0-m24, =1.0.0-m44 Source cves: CVE-2025-59822 Source advisory: SNYK:JAVA-ORGHTTP4S-13019561...

dev.hnaderi:scala-k8s-http4s-ember_native0.4_2.12 (>=0.11.0, <=0.25.0), dev.hnaderi:scala-k8s-http4s_native0.4_2.12 (>=0.4.0, <=0.10.0) +3 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_native0.4_2.12 (>=0.23.16, <=0.23.30)

org.http4s:http4s-ember-corenative0.42.12 MAVEN version =0.23.16, =0.11.0, =0.4.0, =0.23.16, =0.23.16, =0.0.1, =0.0.9 Source cves: CVE-2025-59822 Source advisory: SNYK:JAVA-ORGHTTP4S-13019565...

co.topl:bifrost-daml-broker_2.13 (1.0.0.beta-2), co.topl:brambl-cli_2.13 (>=2.0.0-beta1, <=2.0.0-beta6) +125 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_2.13 (>=0.10.0-m10, <=0.23.30)

org.http4s:http4s-ember-core2.13 MAVEN version =0.10.0-m10, =2.0.0-beta1, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.1.0, =0.21.0, =0.22.1 and more Source cves: CVE-2025-59822 Source advisory: OSV:GHSA-WCWH-7GFW-5WRR...

io.taig:taigless-storage-http4s-server_2.13 (0.15.0), org.http4s:http4s-ember-client_2.13 (>=1.0.0-m37, <=1.0.0-m44) +1 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m37, <=1.0.0-m44)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m37, =1.0.0-m37, =1.0.0-m37, =1.0.0-m44 Source cves: CVE-2025-59822 Source advisory: SNYK:JAVA-ORGHTTP4S-13019559...