Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments | Medium Risk 6.0 | 3 months ago | 1 day ago |
|
|
http4k: `DigestAuthProvider.verify` did not bind to request URI | High Risk 8.1 | 1 month ago | 3 days ago |
|
|
http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI | Medium Risk 6.5 | 1 month ago | 1 month ago |
Page 1