Skip to content

http4k: `ServerFilters.DigestAuth` / `DigestAuthProvider` defaulted to an always-true nonce verifier, disabling replay protection in default deployments

Moderate severity GitHub Reviewed Published Jun 16, 2026 in http4k/http4k • Updated Jun 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts