Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/19 9:15 p.m.15 views

GHSA-JRPC-7VXP-69P6 http4k: `reverseProxy()` defaulted to substring (`Contains`) matching on `Host`; tightened to `Exact`

Impact reverseProxy and reverseProxyRouting matched configured vhosts by substring on the Host header Contains matcher by default. The intended use of these functions in http4k is outbound dispatch e.g. matching AWS service subdomains, per the Contains docstring and test-time composition of fake...

6.3CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder