<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: http4s</title><description>Every new CVE for http4s.</description><link>https://agentprime.io/</link><item><title>CVE-2026-69217: Http4s: Ember Server accepts duplicate Content-Length headers</title><link>https://agentprime.io/advisories/CVE-2026-69217/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69217/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 19:20:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69210: Http4s: WebSocket decoder accepts negative length, causing infinite decode loop</title><link>https://agentprime.io/advisories/CVE-2026-69210/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69210/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 19:19:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69212: Http4s: FollowRedirect middleware leaks credentials over https-&gt;http same-authority redirect</title><link>https://agentprime.io/advisories/CVE-2026-69212/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69212/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 19:09:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69211: Http4s: Set-Cookie rendering does not escape attribute delimiters</title><link>https://agentprime.io/advisories/CVE-2026-69211/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69211/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 18:56:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-69209: Http4s: WebSocket decoder accepts unbounded message sizes</title><link>https://agentprime.io/advisories/CVE-2026-69209/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-69209/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 18:55:29 GMT</pubDate><category>CVE</category></item></channel></rss>