dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-88975 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m47)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-88975 Source advisory: SNYK:JAVA-ORGHTTP4S-19869288...

dev.i10416:slackapis-core_3 (>=0.0.1, <=0.0.2), es.weso:schema_3 (>=0.1.103, <=0.2.4) +23 more potentially affected by CVE-2026-69216 via org.http4s:http4s-ember-core_3 (>=1.0.0-m22, <=1.0.0-m46)

org.http4s:http4s-ember-core3 MAVEN version =1.0.0-m22, =0.0.1, =0.1.103, =0.1.103, =0.1.103, =0.1.93, =0.1.109, =0.1.93, =0.1.102, =0.1.1, =0.0.13, =0.1.93, =0.19.0, =1.0.0-rc5 - io.github.linyxus:papiers-core3 0.2.0 - io.github.torrentdam.server:server3 4.0.0 and more Source cves: CVE-2026-6921...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69218 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69218 Source advisory: SNYK:JAVA-ORGHTTP4S-19869284...

com.avast:sst-bundle-monix-http4s-ember_2.12 (>=0.17.0, <=0.19.3), com.avast:sst-bundle-zio-http4s-ember_2.12 (>=0.17.0, <=0.19.3) +25 more potentially affected by CVE-2026-69208 via org.http4s:http4s-ember-server_2.12 (>=0.22.8, <=0.23.31)

org.http4s:http4s-ember-server2.12 MAVEN version =0.22.8, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.0.0-3-cca5341b, =0.0.0-3-cca5341b, =7.1.0, =0.20.4, =1.6.29, =1.6.29, =1.6.29, =0.8.0-rab.1, =0.1.0-m6, =0.25.0 and more Source cves: CVE-2026-69208 Source advisory: GHSA-FM4G-76C9-7W69...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2026-69206 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m46)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2026-69206 Source advisory: OSV:GHSA-9XWW-74XV-GJFP...

io.github.valdemargr:gql-http4s_2.13 (>=0.1-a2fae94, <=0.1-6257648), io.github.valdemargr:gql-server-http4s_2.13 (>=0.1-5acc59b, <=0.2.8-23-b552e1c) +3 more potentially affected by CVE-2026-73495 via org.http4s:blaze-http_2.13 (>=1.0.0-m33, <=1.0.0-m41)

org.http4s:blaze-http2.13 MAVEN version =1.0.0-m33, =0.1-a2fae94, =0.1-5acc59b, =1.0.0-m33, =1.0.0-m33, =1.0.0-m33, =1.0.0-m41 Source cves: CVE-2026-73495 Source advisory: GHSA-46Q4-43PH-C6FR...

io.github.valdemargr:gql-http4s_3 (>=0.1-a2fae94, <=0.1-6257648), io.github.valdemargr:gql-server-http4s_3 (>=0.1-5acc59b, <=0.2.8-23-b552e1c) +10 more potentially affected by CVE-2026-73494 via org.http4s:blaze-http_3 (>=1.0.0-m33, <=1.0.0-m41)

org.http4s:blaze-http3 MAVEN version =1.0.0-m33, =0.1-a2fae94, =0.1-5acc59b, =1.0.0-m33, =1.0.0-m33, =1.0.0-m33, =0.8.0, =0.9.0, =0.12.0, =0.9.0, =0.10.0, =0.10.1 - pt.tecnico.dsi:scala-openstack-common-clients3 0.11.0 Source cves: CVE-2026-73494 Source advisory: GHSA-MHVJ-JHPQ-885V...

io.github.valdemargr:gql-http4s_2.13 (>=0.1-a2fae94, <=0.1-6257648), io.github.valdemargr:gql-server-http4s_2.13 (>=0.1-5acc59b, <=0.2.8-23-b552e1c) +3 more potentially affected by unknown CVE via org.http4s:blaze-http_2.13 (>=1.0.0-m33, <=1.0.0-m41)

org.http4s:blaze-http2.13 MAVEN version =1.0.0-m33, =0.1-a2fae94, =0.1-5acc59b, =1.0.0-m33, =1.0.0-m33, =1.0.0-m33, =1.0.0-m41 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGHTTP4S-18313143...

dev.i10416:slackapis-core_2.13 (>=0.0.1, <=0.0.2), es.weso:rdfshape-server_2.13 (>=0.0.73, <=0.2.14) +16 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m2, <=1.0.0-m44)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m2, =0.0.1, =0.0.73, =0.1.90, =0.1.90, =0.1.90, =0.1.91, =0.1.109, =0.1.91, =0.1.101, =0.0.82, =0.1.91, =0.1.0, =2.1.0, =2.1.0, =2.2.2 and more Source cves: CVE-2025-59822 Source advisory: MEND:CVE-2025-59822...

io.taig:taigless-storage-http4s-server_2.13 (0.15.0), org.http4s:http4s-ember-client_2.13 (>=1.0.0-m37, <=1.0.0-m44) +1 more potentially affected by CVE-2025-59822 via org.http4s:http4s-ember-core_2.13 (>=1.0.0-m37, <=1.0.0-m44)

org.http4s:http4s-ember-core2.13 MAVEN version =1.0.0-m37, =1.0.0-m37, =1.0.0-m37, =1.0.0-m44 Source cves: CVE-2025-59822 Source advisory: SNYK:JAVA-ORGHTTP4S-13019559...

com.github.ghostdogpr:caliban-http4s_2.12 (1.1.1), com.iheart:thomas-http4s_2.12 (>=1.2.0, <=1.3.9) +29 more potentially affected by CVE-2021-41084 via org.http4s:http4s-server_2.12 (>=0.23.0, <=0.23.3)

org.http4s:http4s-server2.12 MAVEN version =0.23.0, =1.2.0, =1.2.0, =1.2.0, =3.3.2, =3.3.2, =0.19.0-m4, =0.19.0-m4, =0.0.1, =0.12.0-rc2+5-dd85de58, =0.12.0 and more Source cves: CVE-2021-41084 Source advisory: MEND:CVE-2021-41084...

org.http4s:http4s-blaze-server_2.11 (0.17.0-m3), org.http4s:http4s-jetty_2.11 (0.17.0-m3) +6 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.11 (0.17.0-m3)

org.http4s:http4s-server2.11 MAVEN version 0.17.0-m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.11 and may be impacted: - org.http4s:http4s-blaze-server2.11 0.17.0-m3 - org.http4s:http4s-jetty2.11 0.17.0-m3 -...

org.http4s:http4s-blaze-server_2.10 (0.12.6), org.http4s:http4s-jetty_2.10 (0.12.6) +2 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.10 (0.12.6)

org.http4s:http4s-server2.10 MAVEN version 0.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.10 and may be impacted: - org.http4s:http4s-blaze-server2.10 0.12.6 - org.http4s:http4s-jetty2.10 0.12.6 -...

org.http4s:http4s-blaze-server_2.10 (0.15.13a), org.http4s:http4s-jetty_2.10 (0.15.13a) +3 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.10 (0.15.13a)

org.http4s:http4s-server2.10 MAVEN version 0.15.13a is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.10 and may be impacted: - org.http4s:http4s-blaze-server2.10 0.15.13a - org.http4s:http4s-jetty2.10 0.15.13a -...

com.itv:scalapact-http4s-0-16-2a_2.11 (>=2.2.0, <=2.2.1), org.http4s:http4s-blaze-server_2.11 (0.16.2a) +4 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.11 (0.16.2a)

org.http4s:http4s-server2.11 MAVEN version 0.16.2a is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.11 and may be impacted: - com.itv:scalapact-http4s-0-16-2a2.11 =2.2.0, =2.2.1 - org.http4s:http4s-blaze-server2.11 0.16.2a -...

io.get-coursier:http-server-java7_2.11 (>=1.0.0-m13, <=1.0.0-rc1), io.get-coursier:simple-web-server_2.11 (>=1.0.0-m12, <=1.0.0-m12-1) +4 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.11 (0.8.6)

org.http4s:http4s-server2.11 MAVEN version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.11 and may be impacted: - io.get-coursier:http-server-java72.11 =1.0.0-m13, =1.0.0-m12, =1.0.0-m12-1 -...

dev.zio:scalaz-metrics_2.11 (0.0.1), dev.zio:zio-metrics_2.11 (0.0.2) +9 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.11 (0.20.0-m5)

org.http4s:http4s-server2.11 MAVEN version 0.20.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.11 and may be impacted: - dev.zio:scalaz-metrics2.11 0.0.1 - dev.zio:zio-metrics2.11 0.0.2 - io.chrisdavenport:ember-server2....

com.github.gvolpe:http4s-tracer_2.11 (>=1.0-m1, <=1.0-m2), io.kamon:kamon-http4s_2.11 (1.0.10) +6 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.11 (0.19.0-m1)

org.http4s:http4s-server2.11 MAVEN version 0.19.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.11 and may be impacted: - com.github.gvolpe:http4s-tracer2.11 =1.0-m1, =1.0-m2 - io.kamon:kamon-http4s2.11 1.0.10 -...

com.github.barambani:http4s-extend_2.11 (0.0.40), io.github.jmcardon:tsec-http4s_2.11 (0.0.1-rc1) +6 more potentially affected by CVE-2021-39185 via org.http4s:http4s-server_2.11 (0.18.15)

org.http4s:http4s-server2.11 MAVEN version 0.18.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4s:http4s-server2.11 and may be impacted: - com.github.barambani:http4s-extend2.11 0.0.40 - io.github.jmcardon:tsec-http4s2.11 0.0.1-rc1 -...