📦 Http4s

This CVE describes a Cross-Origin Resource Sharing (CORS) vulnerability in http4s, a Scala HTTP library. It allows attackers to perform origin reflection attacks and Null Origin attacks, potentially e...

CVE-2021-21294 is a denial-of-service vulnerability in http4s-blaze-server where the underlying blaze-core library accepts connections without bounds, allowing attackers to exhaust OS socket resources...