Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filtersHttp4s Ember HTTP/2: unbounded continuation frame accumulation
Http4s: Ember chunk parser lenience (TE.TE request smuggling)
Http4s Ember HTTP/2 has an unbounded outbound frame queue
Http4s: DigestAuth allows replay of captured requests
Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)
Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)
Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS
Http4s Ember HTTP/2: unbounded inbound body buffering
http4s has HTTP/2 Denial of Service with Ember Backend
Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.