All 3 CVE vulnerabilities found in blaze, with AI-generated Chinese analysis, references, and POCs.
Vendor: http4s
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-73495 | blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass) CWE-444 | 7.4 | High | 2026-08-12 |
| CVE-2026-73493 | http4s-blaze-server: Unbounded WebSocket message aggregation CWE-770 | 7.5 | High | 2026-08-12 |
| CVE-2021-21293 | Unbounded connection acceptance leads to file handle exhaustion CWE-400 | 7.5 | High | 2021-02-02 |
All 3 known CVE vulnerabilities affecting blaze with full Chinese analysis, references, and POCs where available.