ROOT-APP-MAVEN-CVE-2026-54428 CVE-2026-54428 in org.apache.httpcomponents.core5:httpcore5-h2 - Patched by Root

Root has patched CVE-2026-54428 in the org.apache.httpcomponents.core5:httpcore5-h2 package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-TM54369 Security fixes in spring-boot 4.0.7-r0

Package spring-boot version 4.0.7-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

CLEANSTART-2026-AY54291 Security fixes in spring-boot 4.1.0-r0

Package spring-boot version 4.1.0-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...

CLEANSTART-2026-OB13434 Security fixes in wso2is 7.3.0-r1

Package wso2is version 7.3.0-r1 fixes 11 vulnerabilities: CVE-2025-59340, CVE-2026-25526, CVE-2025-8671, CVE-2026-54399, CVE-2026-54428...

CLEANSTART-2026-TS30875 Security fixes in wso2is 7.2.0-r0

Package wso2is version 7.2.0-r0 fixes 11 vulnerabilities: CVE-2025-59340, CVE-2026-25526, CVE-2025-8671, CVE-2026-54399, CVE-2026-54428...

Security Bulletin: IBM Sterling Control Center is affected by a vulnerability in httpcore5-h2 jar (CVE-2026-54428)

Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-54428 reported for httpcore5-h2-5.3.6.jar. Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and...

Security Bulletin: IBM Maximo Application Suite uses httpcore5-h2-5.3.4.jar which is vulnerable to CVE-2026-54428

Summary IBM Maximo Application Suite uses httpcore5-h2-5.3.4.jar which is vulnerable to CVE-2026-54428. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in t...

CLEANSTART-2026-JK70827 Security fixes in elasticsearch 9.3.7-r1

Package elasticsearch version 9.3.7-r1 fixes 5 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-41715, CVE-2026-42579, CVE-2026-45536...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Allocation of resources without limits or throttling vulnerability in Apache HttpComponents [CVE-2026-54428]

Summary IBM Watson Speech Services Cartridge is vulnerable to an Allocation of resources without limits or throttling vulnerability in Apache HttpComponents due to a flaw in HTTP/2 HPACK decoder which could lead to a D.O.S. CVE-2026-54428. Apache HttpComponents is used in our Java Microservices...

Linux Distros Unpatched Vulnerability : CVE-2026-54428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5.4.2 and earlier, 5.5-beta1 and earlier allows a...

ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16353 more potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.2)

org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...

ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16353 more potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.2)

org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...