http4k vulnerabilities
Every vulnerability this feed holds for http4k, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked.
- 8.2 http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes the auth-int digest…
- 8.2 http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that http4k is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat MediaTek, Inc. Apache Software Foundation WAVLINK Gitea Huawei Linux Cisco Unknown Citrix ag-ui-protocol FFMPEG mathurvishal n/a Plex JFrog Google Jovancoding Ivanti WSO2 e4jvikwp GitLab Adobe