org.http4k:http4k-aws (3.141.0), org.http4k:http4k-client-apache (3.141.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.141.0)

org.http4k:http4k-core MAVEN version 3.141.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.141.0 - org.http4k:http4k-client-apache 3.141.0 - org.http4k:http4k-client-apache-async...

org.http4k.pro:http4k-incubator-db (v6.4.1.0), org.http4k.pro:http4k-mcp-sdk (v6.4.1.0) +173 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (v6.4.1.0)

org.http4k:http4k-core MAVEN version v6.4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k.pro:http4k-incubator-db v6.4.1.0 - org.http4k.pro:http4k-mcp-sdk v6.4.1.0 -...

org.http4k:http4k-aws (3.2.3), org.http4k:http4k-client-apache (3.2.3) +19 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.2.3)

org.http4k:http4k-core MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.2.3 - org.http4k:http4k-client-apache 3.2.3 - org.http4k:http4k-client-okhttp 3.2.3 -...

org.http4k:http4k-aws (3.216.0), org.http4k:http4k-client-apache (3.216.0) +32 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.216.0)

org.http4k:http4k-core MAVEN version 3.216.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.216.0 - org.http4k:http4k-client-apache 3.216.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.134.0), org.http4k:http4k-client-apache (3.134.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.134.0)

org.http4k:http4k-core MAVEN version 3.134.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.134.0 - org.http4k:http4k-client-apache 3.134.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (2.23.3), org.http4k:http4k-client-apache (2.23.3) +13 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.23.3)

org.http4k:http4k-core MAVEN version 2.23.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.23.3 - org.http4k:http4k-client-apache 2.23.3 - org.http4k:http4k-client-okhttp 2.23.3 -...

org.http4k:http4k-aws (3.177.0), org.http4k:http4k-client-apache (3.177.0) +30 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.177.0)

org.http4k:http4k-core MAVEN version 3.177.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.177.0 - org.http4k:http4k-client-apache 3.177.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.195.1), org.http4k:http4k-client-apache (3.195.1) +32 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.195.1)

org.http4k:http4k-core MAVEN version 3.195.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.195.1 - org.http4k:http4k-client-apache 3.195.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-contract (3.178.0), org.http4k:http4k-server-apache (3.178.0) +4 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.178.0)

org.http4k:http4k-core MAVEN version 3.178.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-contract 3.178.0 - org.http4k:http4k-server-apache 3.178.0 - org.http4k:http4k-server-jetty...

org.http4k:http4k-aws (3.35.0), org.http4k:http4k-client-apache (3.35.0) +25 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.35.0)

org.http4k:http4k-core MAVEN version 3.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.35.0 - org.http4k:http4k-client-apache 3.35.0 - org.http4k:http4k-client-apache-async 3.35...

org.http4k:http4k-aws (3.152.0), org.http4k:http4k-client-apache (3.152.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.152.0)

org.http4k:http4k-core MAVEN version 3.152.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.152.0 - org.http4k:http4k-client-apache 3.152.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (2.17.2), org.http4k:http4k-client-apache (2.17.2) +10 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.17.2)

org.http4k:http4k-core MAVEN version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.17.2 - org.http4k:http4k-client-apache 2.17.2 - org.http4k:http4k-client-okhttp 2.17.2 -...

org.http4k:http4k-aws (3.22.2), org.http4k:http4k-client-apache (3.22.2) +25 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.22.2)

org.http4k:http4k-core MAVEN version 3.22.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.22.2 - org.http4k:http4k-client-apache 3.22.2 - org.http4k:http4k-client-apache-async 3.22...

org.http4k:http4k-aws (2.31.2), org.http4k:http4k-client-apache (2.31.2) +16 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.31.2)

org.http4k:http4k-core MAVEN version 2.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.31.2 - org.http4k:http4k-client-apache 2.31.2 - org.http4k:http4k-client-okhttp 2.31.2 -...

org.http4k:http4k-aws (3.26.5), org.http4k:http4k-client-apache (3.26.5) +25 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.26.5)

org.http4k:http4k-core MAVEN version 3.26.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.26.5 - org.http4k:http4k-client-apache 3.26.5 - org.http4k:http4k-client-apache-async 3.26...

org.http4k:http4k-client-apache (2.0.5), org.http4k:http4k-client-okhttp (2.0.5) +8 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (2.0.5)

org.http4k:http4k-core MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 2.0.5 - org.http4k:http4k-client-okhttp 2.0.5 - org.http4k:http4k-contract 2.0.5 -...

org.http4k:http4k-aws (3.137.0), org.http4k:http4k-client-apache (3.137.0) +31 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.137.0)

org.http4k:http4k-core MAVEN version 3.137.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.137.0 - org.http4k:http4k-client-apache 3.137.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-server-apache (3.229.0), org.http4k:http4k-server-jetty (3.229.0) +1 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.229.0)

org.http4k:http4k-core MAVEN version 3.229.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-server-apache 3.229.0 - org.http4k:http4k-server-jetty 3.229.0 - org.http4k:http4k-server-netty...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the BasicCookieStorage process, which does not enforce proper scoping rules for cookies as specified in RFC 6265. An attacker can access or receive cookies intended for other domains or schemes by leveraging a...

org.http4k:http4k-aws (3.284.0), org.http4k:http4k-client-apache (3.284.0) +50 more potentially affected by CVE-2026-100725 via org.http4k:http4k-core (3.284.0)

org.http4k:http4k-core MAVEN version 3.284.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.284.0 - org.http4k:http4k-client-apache 3.284.0 - org.http4k:http4k-client-apache-async...