{"action":"Upgrade org.http4s:http4s-blaze-server_2.12 to 0.21.17 or later.","affected":[{"fixed":"0.21.17","introduced":"0"}],"component":"org.http4s:http4s-blaze-server_2.12","cve_ids":["CVE-2021-21294"],"ecosystem":"Maven","epss":0.02172,"exploited":false,"fixed_versions":["0.21.17"],"ghsa_id":"GHSA-xhv5-w9c5-2r2w","id":"tcs_01M5N9JDWYFJX572S5W067QD8S","modified_at":"2026-02-04T02:36:50.236647Z","published_at":"2021-02-02T21:42:56Z","references":["https://osv.dev/vulnerability/GHSA-xhv5-w9c5-2r2w","https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc","https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w","https://nvd.nist.gov/vuln/detail/CVE-2021-21294","https://github.com/http4s/http4s/commit/987d6589ef79545b9bb2324ac4bdebf82d9a0171"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xhv5-w9c5-2r2w","url":"https://osv.dev/vulnerability/GHSA-xhv5-w9c5-2r2w"}],"summary":"Unbounded connection acceptance in http4s-blaze-server"}