{"uuid": "13709239-bfd6-4323-a0c2-11093b6d05b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-69204", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvlfzmp5aa2j", "content": "CVE-2026-69204 - http4s\nThe Ember component of http4s versions before 0.23.35 and 1.0.0-M47 accepts HTTP messages that include both a Transfer-Encoding header and a Content-Length header. This lets an attacker hide a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#http4s #CVE #infosec", "creation_timestamp": "2026-09-15T20:00:05.828825Z"}