Cpe:2.3:a:http4s:http4s_scala_xml:*:*:*:*:*:*:*:*

The http4s-scala-xml library is vulnerable to XML External Entity (XXE) attacks due to improper configuration of the SAXParserFactory, allowing unauthenticated attackers to perform SSRF or local file disclosure.