org.http4k:http4k-aws (3.219.0), org.http4k:http4k-client-apache (3.219.0) +32 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.219.0)

org.http4k:http4k-core MAVEN version 3.219.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.219.0 - org.http4k:http4k-client-apache 3.219.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.225.0), org.http4k:http4k-client-apache (3.225.0) +22 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.225.0)

org.http4k:http4k-core MAVEN version 3.225.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.225.0 - org.http4k:http4k-client-apache 3.225.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.233.0), org.http4k:http4k-client-apache (3.233.0) +24 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.233.0)

org.http4k:http4k-core MAVEN version 3.233.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.233.0 - org.http4k:http4k-client-apache 3.233.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.239.0), org.http4k:http4k-client-apache (3.239.0) +34 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.239.0)

org.http4k:http4k-core MAVEN version 3.239.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.239.0 - org.http4k:http4k-client-apache 3.239.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.241.0), org.http4k:http4k-client-apache (3.241.0) +34 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.241.0)

org.http4k:http4k-core MAVEN version 3.241.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.241.0 - org.http4k:http4k-client-apache 3.241.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.242.0), org.http4k:http4k-client-apache (3.242.0) +34 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.242.0)

org.http4k:http4k-core MAVEN version 3.242.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.242.0 - org.http4k:http4k-client-apache 3.242.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.245.1), org.http4k:http4k-client-apache (3.245.1) +34 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.245.1)

org.http4k:http4k-core MAVEN version 3.245.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.245.1 - org.http4k:http4k-client-apache 3.245.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.247.0), org.http4k:http4k-client-apache (3.247.0) +25 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.247.0)

org.http4k:http4k-core MAVEN version 3.247.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.247.0 - org.http4k:http4k-client-apache 3.247.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.259.0), org.http4k:http4k-client-apache (3.259.0) +44 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.259.0)

org.http4k:http4k-core MAVEN version 3.259.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.259.0 - org.http4k:http4k-client-apache 3.259.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.112.0), org.http4k:http4k-client-apache (3.112.0) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.112.0)

org.http4k:http4k-core MAVEN version 3.112.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.112.0 - org.http4k:http4k-client-apache 3.112.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.114.0), org.http4k:http4k-client-apache (3.114.0) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.114.0)

org.http4k:http4k-core MAVEN version 3.114.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.114.0 - org.http4k:http4k-client-apache 3.114.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.94.0), org.http4k:http4k-client-apache (3.94.0) +26 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.94.0)

org.http4k:http4k-core MAVEN version 3.94.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.94.0 - org.http4k:http4k-client-apache 3.94.0 - org.http4k:http4k-client-apache-async 3.94...

org.http4k:http4k-aws (3.111.0), org.http4k:http4k-client-apache (3.111.0) +19 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.111.0)

org.http4k:http4k-core MAVEN version 3.111.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.111.0 - org.http4k:http4k-client-apache 3.111.0 - org.http4k:http4k-client-apache-async...

DEBIAN-CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...

CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...

CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...

UBUNTU-CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...

CVE-2026-59881

A flaw was found in AIOHTTP. The WebSocket client in AIOHTTP processes compressed data frames even when the compression mechanism, known as permessage-deflate, has not been properly negotiated. A malicious server can exploit this by sending specially crafted compressed frames. This can lead to...

CVE-2026-68762

In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible...

CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...