Vendor
http4s
Public exploit1Avg CVSS7.4
CVEs in the catalog
31
since 2020-03
Months in the top 100
5
months with a stored rank
Best rank
#42
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| http4s | 26 | 84% |
| blaze | 4 | 13% |
| blaze http 2 13 | 1 | 3% |
| blaze http 3 | 1 | 3% |
| http4s blaze server 2 13 | 1 | 3% |
| http4s ember core 2 12 | 1 | 3% |
| http4s ember core 2 13 | 1 | 3% |
| http4s ember core 3 | 1 | 3% |
| http4s scala xml | 1 | 3% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-400 | 8 | 26% |
| CWE-444 | 7 | 23% |
| CWE-770 | 6 | 19% |
| CWE-22 | 2 | 6% |
| CWE-565 | 2 | 6% |
| CWE-113 | 1 | 3% |
| CWE-1275 | 1 | 3% |
| CWE-1284 | 1 | 3% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-61741 | CWE-611 | none yet | 9.3 | 2026-09-24 |
| CVE-2026-88975 | CWE-400 | none yet | 7.5 | 2026-09-15 |
| CVE-2026-69206 | CWE-294 | none yet | 5.9 | 2026-09-15 |
| CVE-2026-69202 | CWE-400, CWE-770 | none yet | 7.5 | 2026-09-15 |
| CVE-2026-69218 | CWE-770 | none yet | 7.5 | 2026-09-15 |
| CVE-2026-69203 | CWE-400, CWE-770 | none yet | 7.5 | 2026-09-15 |
| CVE-2026-69217 | CWE-444 | none yet | 8.7 | 2026-09-15 |
| CVE-2026-69210 | CWE-835, CWE-1284 | none yet | 7.5 | 2026-09-15 |
| CVE-2026-69215 | CWE-565, CWE-1275 | none yet | 6.8 | 2026-09-15 |
| CVE-2026-69205 | CWE-444 | none yet | 8.7 | 2026-09-15 |
| CVE-2026-69212 | CWE-200, CWE-319 | 1 | 5.9 | 2026-09-15 |
| CVE-2026-69213 | CWE-400, CWE-770 | none yet | 7.5 | 2026-09-15 |
| CVE-2026-69214 | CWE-384, CWE-565 | none yet | 6.8 | 2026-09-15 |
| CVE-2026-69201 | CWE-22 | none yet | 5.9 | 2026-09-15 |
| CVE-2026-69216 | CWE-444 | none yet | 5.4 | 2026-09-15 |