Skip to main content

Typelevel

10 CVEs vendor

Monthly

CVE-2025-59822 Sep 23, 19:15 Maven MEDIUM POC PATCH This Month

Http4s is a Scala interface for HTTP services. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Request Smuggling Http4S Typelevel
NVD GitHub
CVSS 4.0
6.3
EPSS
0.1%
CVE-2023-50730 Dec 22, 21:15 Maven HIGH PATCH This Week

Grackle is a GraphQL server written in functional Scala, built on the Typelevel stack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Grackle Typelevel
NVD GitHub
CVSS 3.1
7.5
EPSS
0.8%
CVE-2023-22465 Jan 04, 16:15 Maven MEDIUM POC PATCH This Month

Http4s is a Scala interface for HTTP services. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Http4S Typelevel
NVD GitHub
CVSS 3.1
5.3
EPSS
0.8%
CVE-2022-31183 Aug 01, 20:15 Maven CRITICAL POC PATCH Act Now

fs2 is a compositional, streaming I/O library for Scala. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Node.js Fs2 Typelevel
NVD GitHub
CVSS 3.1
9.8
EPSS
0.6%
CVE-2021-41084 Sep 21, 18:15 Maven MEDIUM POC PATCH This Month

http4s is an open source scala interface for HTTP. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

SSRF Http4S Typelevel
NVD GitHub
CVSS 3.1
4.7
EPSS
1.2%
CVE-2021-39185 Sep 01, 20:15 Maven CRITICAL PATCH Act Now

Http4s is a minimal, idiomatic Scala interface for HTTP services. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Http4S Typelevel
NVD GitHub
CVSS 3.1
9.1
EPSS
0.6%
CVE-2021-32643 May 27, 18:15 Maven MEDIUM PATCH This Month

Http4s is a Scala interface for HTTP services. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Http4S Typelevel
NVD GitHub
CVSS 3.1
5.8
EPSS
1.4%
CVE-2021-21294 Feb 02, 22:15 Maven HIGH PATCH This Week

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Http4S Typelevel
NVD GitHub
CVSS 3.1
7.5
EPSS
2.1%
CVE-2021-21293 Feb 02, 22:15 Maven HIGH PATCH This Week

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Blaze Typelevel
NVD GitHub
CVSS 3.1
7.5
EPSS
2.1%
CVE-2020-5280 Mar 25, 18:15 Maven HIGH PATCH This Week

http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Http4S Typelevel
NVD GitHub
CVSS 3.1
7.5
EPSS
6.8%
EPSS 0% CVSS 6.3
MEDIUM POC PATCH This Month

Http4s is a Scala interface for HTTP services. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Request Smuggling Http4S +1
NVD GitHub
EPSS 1% CVSS 7.5
HIGH PATCH This Week

Grackle is a GraphQL server written in functional Scala, built on the Typelevel stack. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Grackle Typelevel
NVD GitHub
EPSS 1% CVSS 5.3
MEDIUM POC PATCH This Month

Http4s is a Scala interface for HTTP services. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Http4S Typelevel
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC PATCH Act Now

fs2 is a compositional, streaming I/O library for Scala. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Node.js Fs2 +1
NVD GitHub
EPSS 1% CVSS 4.7
MEDIUM POC PATCH This Month

http4s is an open source scala interface for HTTP. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

SSRF Http4S Typelevel
NVD GitHub
EPSS 1% CVSS 9.1
CRITICAL PATCH Act Now

Http4s is a minimal, idiomatic Scala interface for HTTP services. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Http4S Typelevel
NVD GitHub
EPSS 1% CVSS 5.8
MEDIUM PATCH This Month

Http4s is a Scala interface for HTTP services. Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Path Traversal vulnerability could allow attackers to access files and directories outside the intended path.

Path Traversal Http4S Typelevel
NVD GitHub
EPSS 2% CVSS 7.5
HIGH PATCH This Week

Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Http4S Typelevel
NVD GitHub
EPSS 2% CVSS 7.5
HIGH PATCH This Week

blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Blaze Typelevel
NVD GitHub
EPSS 7% CVSS 7.5
HIGH PATCH This Week

http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Http4S Typelevel
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy