{"action":"Upgrade org.http4k:http4k-security-digest to 5.42.0.0 (5.x) or 6.50.0.0 (6.x) or later.","affected":[{"fixed":"6.50.0.0","introduced":"6.0.0.0"},{"fixed":"5.42.0.0","introduced":"5.0.0.0"},{"introduced":"0","last_affected":"4.48.2.0"}],"component":"org.http4k:http4k-security-digest","cve_ids":["CVE-2026-54147"],"ecosystem":"Maven","epss":0.00255,"exploited":false,"fixed_versions":["6.50.0.0","5.42.0.0"],"ghsa_id":"GHSA-vxxm-wwqh-mh47","id":"tcs_01M5N9F35T3ZA07F08GHW4QA43","modified_at":"2026-08-17T22:11:01.448820Z","published_at":"2026-08-17T21:56:58Z","references":["https://osv.dev/vulnerability/GHSA-vxxm-wwqh-mh47","https://github.com/http4k/http4k/security/advisories/GHSA-vxxm-wwqh-mh47","https://github.com/http4k/http4k/commit/65d23d99fc","https://github.com/http4k/http4k","https://github.com/http4k/http4k/releases/tag/6.50.0.0"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-vxxm-wwqh-mh47","url":"https://osv.dev/vulnerability/GHSA-vxxm-wwqh-mh47"}],"summary":"http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI"}