tocsin

CVE-2021-21294

2 advisories.

Maven/org.http4s:http4s-blaze-server_2.12 CVE-2021-21294: high 7.5, EPSS 2.15%

Unbounded connection acceptance in http4s-blaze-server

Action: Upgrade org.http4s:http4s-blaze-server_2.12 to 0.21.17 or later.

Affected

introducedfixedlast affected
00.21.17-

Fixed versions

0.21.17

Sources

CVE-2021-21294 · published · modified · JSON

Maven/org.http4s:http4s-blaze-server_2.13 CVE-2021-21294: high 7.5, EPSS 2.15%

Unbounded connection acceptance in http4s-blaze-server

Action: Upgrade org.http4s:http4s-blaze-server_2.13 to 0.21.17 or later.

Affected

introducedfixedlast affected
00.21.17-

Fixed versions

0.21.17

Sources

CVE-2021-21294 · published · modified · JSON