io.getkyo:kyo-bench_3 (>=1.0.0-rc2, <=1.0.0-rc5), io.github.linyxus:papiers-core_3 (0.2.0) +6 more potentially affected by CVE-2026-69209 via org.http4s:http4s-ember-server_3 (>=1.0.0-m29, <=1.0.0-m46)

org.http4s:http4s-ember-server3 MAVEN version =1.0.0-m29, =1.0.0-rc2, =0.10.0, =0.1, =0.1, =0.9.0, =0.10.1 Source cves: CVE-2026-69209 Source advisory: SNYK:JAVA-ORGHTTP4S-19851899...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the WebSocket decoder process. An attacker can exhaust server memory by sending oversized frames or fragmented messages without size limits. Details Denial of Service DoS describes a family of attacks, all...

io.getkyo:kyo-bench_3 (>=1.0.0-rc2, <=1.0.0-rc5), io.github.linyxus:papiers-core_3 (0.2.0) +6 more potentially affected by CVE-2026-69208 via org.http4s:http4s-ember-server_3 (>=1.0.0-m29, <=1.0.0-m46)

org.http4s:http4s-ember-server3 MAVEN version =1.0.0-m29, =1.0.0-rc2, =0.10.0, =0.1, =0.1, =0.9.0, =0.10.1 Source cves: CVE-2026-69208 Source advisory: GHSA-FM4G-76C9-7W69...

ai.starlake:quack-on-demand_3 (>=0.1.0, <=0.4.0), com.47deg:energy-monitor-persistence-app_3 (0.2.0) +89 more potentially affected by CVE-2026-69208 via org.http4s:http4s-ember-server_3 (>=0.22.14, <=0.23.34)

org.http4s:http4s-ember-server3 MAVEN version =0.22.14, =0.1.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.1, =0.0.0-3-cca5341b, =7.1.0, =0.22.0, =1.9.3, =2.0.0, =2.0.0, =6.9.0, =1.0.0, =5.0.0 and more Source cves: CVE-2026-69208 Source advisory: MEND:CVE-2026-69208...

com.softwaremill.sttp.tapir:tapir-http4s-server_3 (>=0.18.1, <=0.18.3), org.http4s:http4s-blaze-server_3 (>=0.22.0, <=0.22.4) +4 more potentially affected by CVE-2021-41084 via org.http4s:http4s-server_3 (>=0.22.0, <=0.22.4)

org.http4s:http4s-server3 MAVEN version =0.22.0, =0.18.1, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.4 Source cves: CVE-2021-41084 Source advisory: GHSA-5VCM-3XC3-W7X3...

com.softwaremill.sttp.tapir:tapir-http4s-server_3 (>=0.18.1, <=0.18.3), org.http4s:http4s-blaze-server_3 (>=0.22.0, <=0.22.2) +4 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_3 (>=0.22.0, <=0.22.2)

org.http4s:http4s-server3 MAVEN version =0.22.0, =0.18.1, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.2 Source cves: CVE-2021-39185 Source advisory: OSV:GHSA-52CF-226F-RHR6...

com.softwaremill.sttp.tapir:tapir-http4s-server_3 (>=0.18.1, <=0.18.3), org.http4s:http4s-blaze-server_3 (>=0.22.0, <=0.22.2) +4 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_3 (>=0.22.0, <=0.22.2)

org.http4s:http4s-server3 MAVEN version =0.22.0, =0.18.1, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.2 Source cves: CVE-2021-39185 Source advisory: GHSA-52CF-226F-RHR6...

com.softwaremill.sttp.tapir:tapir-http4s-server_3 (>=0.18.1, <=0.18.3), org.http4s:http4s-blaze-server_3 (>=0.22.0, <=0.22.2) +4 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_3 (>=0.22.0, <=0.22.2)

org.http4s:http4s-server3 MAVEN version =0.22.0, =0.18.1, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.0, =0.22.2 Source cves: CVE-2021-39185 Source advisory: MEND:CVE-2021-39185...