CVE-2026-107229

A flaw was found in AsyncHttpClient. The library's cookie store incompletely validates domain attributes when processing HTTP cookies. A remote attacker controlling a server can exploit this vulnerability to store cookies that the client subsequently sends to unrelated domains. This allows...