tocsin

CVE-2026-54556

3 advisories.

Maven/org.http4s:http4s-ember-core_2.12 CVE-2026-54556: high

http4s has HTTP/2 Denial of Service with Ember Backend

Action: Upgrade org.http4s:http4s-ember-core_2.12 to 0.23.35 or later.

Affected

introducedfixedlast affected
00.23.35-

Fixed versions

0.23.35

Sources

CVE-2026-54556 · published · modified · JSON

Maven/org.http4s:http4s-ember-core_2.13 CVE-2026-54556: high

http4s has HTTP/2 Denial of Service with Ember Backend

Action: Upgrade org.http4s:http4s-ember-core_2.13 to 0.23.35 (0.x) or 1.0.0-M47 (1.x) or later.

Affected

introducedfixedlast affected
1.0.0-M11.0.0-M47-
00.23.35-

Fixed versions

1.0.0-M470.23.35

Sources

CVE-2026-54556 · published · modified · JSON

Maven/org.http4s:http4s-ember-core_3 CVE-2026-54556: high

http4s has HTTP/2 Denial of Service with Ember Backend

Action: Upgrade org.http4s:http4s-ember-core_3 to 0.23.35 (0.x) or 1.0.0-M47 (1.x) or later.

Affected

introducedfixedlast affected
00.23.35-
1.0.0-M11.0.0-M47-

Fixed versions

0.23.351.0.0-M47

Sources

CVE-2026-54556 · published · modified · JSON