Maven/org.http4s:blaze-core_2.13 CVE-2021-21293: high 7.5, EPSS 2.12%
Unbounded connection acceptance leads to file handle exhaustion
Action: Upgrade org.http4s:blaze-core_2.13 to 0.14.15 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.15 | - |
Fixed versions
| 0.14.15 |
Sources
- osv: GHSA-xmw9-q7x9-j5qc#Maven/org.http4s:blaze-core_2.13
- https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc
- https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w
- https://nvd.nist.gov/vuln/detail/CVE-2021-21293
- https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1
CVE-2021-21293 · published · modified · JSON