382 matches found
CVE-2026-107283
A flaw was found in AsyncHttpClient. This vulnerability can weaken authentication security because the Realm.Builder component generates HTTP Digest client nonces—unique values used to protect against replay and precomputation attacks—using an insecure random number generator instead of a...
CVE-2026-107280
A flaw was found in AsyncHttpClient. The cookie storage mechanism fails to reject public domain suffixes such as .co.uk when validating cookie domain attributes. A remote attacker controlling a website under a shared public suffix can set cookies for the entire suffix, causing the client to...
CVE-2026-107281
A flaw was found in AsyncHttpClient. When connection-oriented authentication mechanisms, such as NT LAN Manager NTLM or Negotiate, are used, the HTTP connection pool does not account for the authenticated user identity. Consequently, a connection authenticated by one user can be reused by request...
CVE-2026-107226
A flaw was found in AsyncHttpClient. The default cookie store fails to track whether cookies were received over an encrypted connection, allowing unencrypted HTTP responses to plant, overwrite, or delete cookies designated with the Secure attribute. A remote attacker capable of returning an...
CVE-2026-102740
A flaw was found in AsyncHttpClient. Resumable download state is stored in a predictable shared temporary directory with insecure permissions and link-following file operations. A local attacker can exploit this issue by placing a symbolic link in the shared location to overwrite arbitrary files...
CLEANSTART-2026-SL84472 AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses
Security vulnerability affects the druid-fips package. The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses...
CLEANSTART-2026-CY25712 AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses
Security vulnerability affects the druid-fips package. The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses...
Linux Distros Unpatched Vulnerability : CVE-2026-107279
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0.12, a peer offering...
CLEANSTART-2026-WS54665 AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses
Security vulnerability affects the apache-hive package. The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses...
Linux Distros Unpatched Vulnerability : CVE-2026-107226
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the...
Linux Distros Unpatched Vulnerability : CVE-2026-102740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12,...
UBUNTU-CVE-2026-102740
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
CVE-2026-102740
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
DEBIAN-CVE-2026-102740
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
CVE-2026-102740
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
CVE-2026-102740
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
CVE-2026-102740 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
CVE-2026-102740 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
CVE-2026-102740 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...
EUVD-2026-102223
The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path...