{"action":"Upgrade org.http4s:blaze-core_2.11 to 0.14.15 or later.","affected":[{"fixed":"0.14.15","introduced":"0"}],"component":"org.http4s:blaze-core_2.11","cve_ids":["CVE-2021-21293"],"ecosystem":"Maven","epss":0.02143,"exploited":false,"fixed_versions":["0.14.15"],"ghsa_id":"GHSA-xmw9-q7x9-j5qc","id":"tcs_01M5N9JNE5KENCSE8ZKQYXW0XK","modified_at":"2026-02-04T02:31:31.125941Z","published_at":"2021-02-02T21:42:49Z","references":["https://osv.dev/vulnerability/GHSA-xmw9-q7x9-j5qc","https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc","https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w","https://nvd.nist.gov/vuln/detail/CVE-2021-21293","https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xmw9-q7x9-j5qc","url":"https://osv.dev/vulnerability/GHSA-xmw9-q7x9-j5qc"}],"summary":"Unbounded connection acceptance leads to file handle exhaustion"}