All 2 CVE vulnerabilities found in http4k, with AI-generated Chinese analysis, references, and POCs.
Vendor: http4k
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-53659 | http4k: Unbounded gzip decompression in `ServerFilters.GZip` / `RequestFilters.GunZip` allowed memory-exhaustion DoS CWE-409 | 7.5 | High | 2026-09-14 |
| CVE-2024-55875 | http4k has a potential XXE (XML External Entity Injection) vulnerability CWE-200 | 9.8 | Critical | 2024-12-12 |
All 2 known CVE vulnerabilities affecting http4k with full Chinese analysis, references, and POCs where available.