High
CVE-2025-61689
HTTP.jl is an HTTP client and server functionality for the Julia programming language. Prior to version 1.10.19, HTTP.jl did not validate header names/values for illegal characters, allowing CRLF-bas…
Tag: Julia
All CVEs associated with "Julia". Page 1/1 • 5 CVEs.
About “Julia”
A curated feed of “Julia”-related CVEs appears below. We currently track 5 CVEs for this tag (all time). In the last 365 days, 4 were published. Average CVSS is 8.3 (all time; 9.0 over 365d), and 80% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-113 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting'), CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection'), CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection').
In our taxonomy this topic maps to a LOW impact class. Language runtimes and libraries cascade through dependency graphs. Upgrade runtime and toolchain, pin versions, rebuild images, and enable SAST or DAST and linters. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
Support & lifecycle: julia
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 1.12 | 1.12.6 | - | ||
| 1.11 | 1.11.9 | Expired | ||
| 1.10 | 1.10.11 | - | LTS | |
| 1.6 | 1.6.7 | Expired | LTS | |
| 1.0 | 1.0.5 | Expired | LTS |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “Julia” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2025-10-10
2025-06-25
Critical
CVE-2025-52483
Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious…
Critical
CVE-2025-52480
Registrator is a GitHub app that automates creation of registration pull requests for julia packages to the General registry. Prior to version 1.9.5, if the clone URL returned by GitHub is malicious…
High
CVE-2025-52479
HTTP.jl provides HTTP client and server functionality for Julia, and URIs.jl parses and works with Uniform Resource Identifiers (URIs). URIs.jl prior to version 1.6.0 and HTTP.jl prior to version 1.1…
2024-05-30
Medium
CVE-2024-36023
In the Linux kernel, the following vulnerability has been resolved: Julia Lawall reported this null pointer dereference, this should fix it.