org.http4k:http4k-client-apache (1.20.0), org.http4k:http4k-client-okhttp (1.20.0) +7 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.20.0)

org.http4k:http4k-core MAVEN version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.20.0 - org.http4k:http4k-client-okhttp 1.20.0 - org.http4k:http4k-contract 1.20....

org.http4k:http4k-client-apache (1.18.0), org.http4k:http4k-client-okhttp (1.18.0) +7 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.18.0)

org.http4k:http4k-core MAVEN version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.18.0 - org.http4k:http4k-client-okhttp 1.18.0 - org.http4k:http4k-contract 1.18....

org.http4k:http4k-client-apache (1.5.0), org.http4k:http4k-contract (1.5.0) +6 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.5.0)

org.http4k:http4k-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.5.0 - org.http4k:http4k-contract 1.5.0 - org.http4k:http4k-format-argo 1.5.0 -...

org.http4k:http4k-client-apache (1.19.1), org.http4k:http4k-client-okhttp (1.19.1) +7 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.19.1)

org.http4k:http4k-core MAVEN version 1.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.19.1 - org.http4k:http4k-client-okhttp 1.19.1 - org.http4k:http4k-contract 1.19....

org.http4k:http4k-client-okhttp (1.26.0), org.http4k:http4k-format-argo (1.26.0) +3 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.26.0)

org.http4k:http4k-core MAVEN version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-okhttp 1.26.0 - org.http4k:http4k-format-argo 1.26.0 - org.http4k:http4k-format-jackson...

org.http4k:http4k-client-apache (1.21.0), org.http4k:http4k-client-okhttp (1.21.0) +7 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.21.0)

org.http4k:http4k-core MAVEN version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.21.0 - org.http4k:http4k-client-okhttp 1.21.0 - org.http4k:http4k-contract 1.21....

org.http4k:http4k-client-apache (1.26.2), org.http4k:http4k-client-okhttp (1.26.2) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.26.2)

org.http4k:http4k-core MAVEN version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.26.2 - org.http4k:http4k-client-okhttp 1.26.2 - org.http4k:http4k-contract 1.26....

org.http4k:http4k-client-apache (1.11.0), org.http4k:http4k-contract (1.11.0) +6 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.11.0)

org.http4k:http4k-core MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.11.0 - org.http4k:http4k-contract 1.11.0 - org.http4k:http4k-format-argo 1.11.0 ...

org.http4k:http4k-client-apache (2.1.1), org.http4k:http4k-client-okhttp (2.1.1) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.1.1)

org.http4k:http4k-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 2.1.1 - org.http4k:http4k-client-okhttp 2.1.1 - org.http4k:http4k-contract 2.1.1 -...

org.http4k:http4k-aws (3.143.0), org.http4k:http4k-client-apache (3.143.0) +31 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.143.0)

org.http4k:http4k-core MAVEN version 3.143.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.143.0 - org.http4k:http4k-client-apache 3.143.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.116.0), org.http4k:http4k-client-apache (3.116.0) +29 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.116.0)

org.http4k:http4k-core MAVEN version 3.116.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.116.0 - org.http4k:http4k-client-apache 3.116.0 - org.http4k:http4k-client-apache-async...

GHSA-G4W2-6H2R-3M3W http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS

Impact ServerFilters.GZip and RequestFilters.GunZip and the underlying Gzip functions used to decompress request bodies did not impose any cap on the decompressed size. A small malicious gzip-encoded request body on the order of kilobytes could decompress to gigabytes, exhausting the JVM heap and...

org.http4k:http4k-server-apache (3.229.0), org.http4k:http4k-server-jetty (3.229.0) +1 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.229.0)

org.http4k:http4k-core MAVEN version 3.229.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-server-apache 3.229.0 - org.http4k:http4k-server-jetty 3.229.0 - org.http4k:http4k-server-netty...

org.http4k:http4k-aws (3.2.3), org.http4k:http4k-client-apache (3.2.3) +19 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.2.3)

org.http4k:http4k-core MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.2.3 - org.http4k:http4k-client-apache 3.2.3 - org.http4k:http4k-client-okhttp 3.2.3 -...

org.http4k:http4k-aws (3.254.0), org.http4k:http4k-client-apache (3.254.0) +43 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.254.0)

org.http4k:http4k-core MAVEN version 3.254.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.254.0 - org.http4k:http4k-client-apache 3.254.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-format-argo (0.21.0), org.http4k:http4k-format-jackson (0.21.0) +2 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (0.21.0)

org.http4k:http4k-core MAVEN version 0.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-format-argo 0.21.0 - org.http4k:http4k-format-jackson 0.21.0 - org.http4k:http4k-server-netty...

org.http4k:http4k-aws (2.29.2), org.http4k:http4k-client-apache (2.29.2) +15 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.29.2)

org.http4k:http4k-core MAVEN version 2.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.29.2 - org.http4k:http4k-client-apache 2.29.2 - org.http4k:http4k-client-okhttp 2.29.2 -...

org.http4k:http4k-aws (3.114.0), org.http4k:http4k-client-apache (3.114.0) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.114.0)

org.http4k:http4k-core MAVEN version 3.114.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.114.0 - org.http4k:http4k-client-apache 3.114.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.102.1), org.http4k:http4k-client-apache (3.102.1) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.102.1)

org.http4k:http4k-core MAVEN version 3.102.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.102.1 - org.http4k:http4k-client-apache 3.102.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.27.0), org.http4k:http4k-client-apache (3.27.0) +10 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.27.0)

org.http4k:http4k-core MAVEN version 3.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.27.0 - org.http4k:http4k-client-apache 3.27.0 - org.http4k:http4k-client-apache-async 3.27...