org.http4k/http4k-format-xml vulnerabilities

Latest org.http4k/http4k-format-xml CVEs

Newest publication first

1. CVE-2024-55875 http4k has a potential XXE (XML External Entity Injection) vulnerability

   Published 2024-12-12

   Critical·CVSS 9.8 EPSS 1.9%

   http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive informat...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.