HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP message parsing process. An attacker can bypass intermediary access controls, poison caches, or cause victim requests to be joined with attacker-controlled prefixes by sending requests containing both...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP message parsing process. An attacker can bypass intermediary access controls, poison caches, or cause victim requests to be joined with attacker-controlled prefixes by sending requests containing both...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP message parsing process. An attacker can bypass intermediary access controls, poison caches, or cause victim requests to be joined with attacker-controlled prefixes by sending requests containing both...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69205 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69205 Source advisory: SNYK:JAVA-ORGHTTP4S-19869268...

co.topl:bifrost-daml-broker_2.13 (1.0.0.beta-2), co.topl:brambl-cli_2.13 (>=2.0.0-beta1, <=2.0.0-beta6) +126 more potentially affected by CVE-2026-69205 via org.http4s:http4s-ember-core_2.13 (>=0.10.0-m10, <=0.23.34)

org.http4s:http4s-ember-core2.13 MAVEN version =0.10.0-m10, =2.0.0-beta1, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.1.0, =0.21.0, =0.24.0 and more Source cves: CVE-2026-69205 Source advisory: SNYK:JAVA-ORGHTTP4S-19869268...

com.armanbilge:feral-lambda-cloudformation-custom-resource_2.12 (>=0.1-f497734, <=0.1-7d4b1e7), com.armanbilge:sbt-bundlemon_2.12_1.0 (0.1.4) +69 more potentially affected by CVE-2026-69205 via org.http4s:http4s-ember-core_2.12 (>=0.10.0-m10, <=0.23.34)

org.http4s:http4s-ember-core2.12 MAVEN version =0.10.0-m10, =0.1-f497734, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.21.0, =0.20.4, =0.21.0, =0.21.0, =0.22.1 and more Source cves: CVE-2026-69205 Source advisory: SNYK:JAVA-ORGHTTP4S-19869...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HeaderP.parse process. An attacker can bypass access controls, hijack cross-user requests, or poison server caches by crafting HTTP requests with specially formatted Transfer-Encoding header values that...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HeaderP.parse process. An attacker can bypass access controls, hijack cross-user requests, or poison server caches by crafting HTTP requests with specially formatted Transfer-Encoding header values that...

dev.i10416:slackapis-core_3 (>=0.0.1, <=0.0.2), es.weso:schema_3 (>=0.1.103, <=0.2.4) +23 more potentially affected by CVE-2026-69217 via org.http4s:http4s-ember-core_3 (>=1.0.0-m22, <=1.0.0-m46)

org.http4s:http4s-ember-core3 MAVEN version =1.0.0-m22, =0.0.1, =0.1.103, =0.1.103, =0.1.103, =0.1.93, =0.1.109, =0.1.93, =0.1.102, =0.1.1, =0.0.13, =0.1.93, =0.19.0, =1.0.0-rc5 - io.github.linyxus:papiers-core3 0.2.0 - io.github.torrentdam.server:server3 4.0.0 and more Source cves: CVE-2026-6921...

ai.starlake:quack-on-demand_3 (>=0.1.0, <=0.4.0), com.47deg:energy-monitor-persistence-app_3 (0.2.0) +194 more potentially affected by CVE-2026-69217 via org.http4s:http4s-ember-core_3 (>=0.22.0-m8, <=0.23.34)

org.http4s:http4s-ember-core3 MAVEN version =0.22.0-m8, =0.1.0, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.1, =1.0.0, =0.0.0-3-cca5341b, =7.1.0, =7.1.1 and more Source cves: CVE-2026-69217 Source advisory: SNYK:JAVA-ORGHTTP4S-19869279...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69217 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69217 Source advisory: SNYK:JAVA-ORGHTTP4S-19869278...

com.armanbilge:feral-lambda-cloudformation-custom-resource_2.12 (>=0.1-f497734, <=0.1-7d4b1e7), com.armanbilge:sbt-bundlemon_2.12_1.0 (0.1.4) +69 more potentially affected by CVE-2026-69217 via org.http4s:http4s-ember-core_2.12 (>=0.10.0-m10, <=0.23.34)

org.http4s:http4s-ember-core2.12 MAVEN version =0.10.0-m10, =0.1-f497734, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.21.0, =0.20.4, =0.21.0, =0.21.0, =0.22.1 and more Source cves: CVE-2026-69217 Source advisory: SNYK:JAVA-ORGHTTP4S-19869...

co.topl:bifrost-daml-broker_2.13 (1.0.0.beta-2), co.topl:brambl-cli_2.13 (>=2.0.0-beta1, <=2.0.0-beta6) +126 more potentially affected by CVE-2026-69217 via org.http4s:http4s-ember-core_2.13 (>=0.10.0-m10, <=0.23.34)

org.http4s:http4s-ember-core2.13 MAVEN version =0.10.0-m10, =2.0.0-beta1, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.1.0, =0.21.0, =0.24.0 and more Source cves: CVE-2026-69217 Source advisory: SNYK:JAVA-ORGHTTP4S-19869278...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/1.1 parsing process. An attacker can bypass front-end controls, capture another user's headers, or poison a cache by sending requests with differing duplicate Content-Length headers, especially when th...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/1.1 parsing process. An attacker can bypass front-end controls, capture another user's headers, or poison a cache by sending requests with differing duplicate Content-Length headers, especially when th...

HTTP Request Smuggling

Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in the HTTP/1.1 parsing process. An attacker can bypass front-end controls, capture another user's headers, or poison a cache by sending requests with differing duplicate Content-Length headers, especially when th...

ai.starlake:quack-on-demand_3 (>=0.1.0, <=0.4.0), com.47deg:energy-monitor-persistence-app_3 (0.2.0) +194 more potentially affected by CVE-2026-69203 via org.http4s:http4s-ember-core_3 (>=0.22.0-m8, <=0.23.34)

org.http4s:http4s-ember-core3 MAVEN version =0.22.0-m8, =0.1.0, =0.0-a75a626, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.1, =1.0.0, =0.0.0-3-cca5341b, =7.1.0, =7.1.1 and more Source cves: CVE-2026-69203 Source advisory: SNYK:JAVA-ORGHTTP4S-19865003...

dev.i10416:slackapis-core_3 (>=0.0.1, <=0.0.2), es.weso:schema_3 (>=0.1.103, <=0.2.4) +23 more potentially affected by CVE-2026-69203 via org.http4s:http4s-ember-core_3 (>=1.0.0-m22, <=1.0.0-m46)

org.http4s:http4s-ember-core3 MAVEN version =1.0.0-m22, =0.0.1, =0.1.103, =0.1.103, =0.1.103, =0.1.93, =0.1.109, =0.1.93, =0.1.102, =0.1.1, =0.0.13, =0.1.93, =0.19.0, =1.0.0-rc5 - io.github.linyxus:papiers-core3 0.2.0 - io.github.torrentdam.server:server3 4.0.0 and more Source cves: CVE-2026-6920...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69203 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69203 Source advisory: SNYK:JAVA-ORGHTTP4S-19865002...

com.armanbilge:feral-lambda-cloudformation-custom-resource_2.12 (>=0.1-f497734, <=0.1-7d4b1e7), com.armanbilge:sbt-bundlemon_2.12_1.0 (0.1.4) +69 more potentially affected by CVE-2026-69203 via org.http4s:http4s-ember-core_2.12 (>=0.10.0-m10, <=0.23.34)

org.http4s:http4s-ember-core2.12 MAVEN version =0.10.0-m10, =0.1-f497734, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.21.0, =0.20.4, =0.21.0, =0.21.0, =0.22.1 and more Source cves: CVE-2026-69203 Source advisory: SNYK:JAVA-ORGHTTP4S-19865...