CVE-2026-69210

Http4s , a Scala HTTP service library, is vulnerable to a denial of service via its WebSocket decoder. In versions prior to 0.23.35 and 1.0.0-M47 , FrameTranscoder.bodyLength rejects extended payload lengths above Integer.MAX_VALUE but incorrectly permits negative 64-bit lengths . A remote client...