https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T17:26:11.449110+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120317 fkie_cve-2026-120317 2026-11-05T17:26:11.450785+00:00

http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes the auth-int digest without hashing the request entity body. On-path attackers on non-TLS channels can rewrite the body of authenticated requests while keeping the Authorization header valid, executing state-changing actions as the victim.

 https://db.gcve.eu/vuln/ghsa-65gw-vqgg-jvcf GHSA-65gw-vqgg-jvcf 2026-11-05T17:26:11.450873+00:00

http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes the auth-int digest without hashing the request entity body. On-path attackers on non-TLS channels can rewrite the body of authenticated requests while keeping the Authorization header valid, executing state-changing actions as the victim.