org.http4k:http4k-aws (3.35.2), org.http4k:http4k-client-apache (3.35.2) +25 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.35.2)

org.http4k:http4k-core MAVEN version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.35.2 - org.http4k:http4k-client-apache 3.35.2 - org.http4k:http4k-client-apache-async 3.35...

org.http4k:http4k-aws (3.175.0), org.http4k:http4k-client-apache (3.175.0) +31 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.175.0)

org.http4k:http4k-core MAVEN version 3.175.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.175.0 - org.http4k:http4k-client-apache 3.175.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.141.0), org.http4k:http4k-client-apache (3.141.0) +31 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.141.0)

org.http4k:http4k-core MAVEN version 3.141.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.141.0 - org.http4k:http4k-client-apache 3.141.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.99.0), org.http4k:http4k-client-apache (3.99.0) +27 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.99.0)

org.http4k:http4k-core MAVEN version 3.99.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.99.0 - org.http4k:http4k-client-apache 3.99.0 - org.http4k:http4k-client-apache-async 3.99...

org.http4k:http4k-aws (3.171.0), org.http4k:http4k-client-apache (3.171.0) +30 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.171.0)

org.http4k:http4k-core MAVEN version 3.171.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.171.0 - org.http4k:http4k-client-apache 3.171.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-client-apache (1.27.0), org.http4k:http4k-client-okhttp (1.27.0) +8 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (1.27.0)

org.http4k:http4k-core MAVEN version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.27.0 - org.http4k:http4k-client-okhttp 1.27.0 - org.http4k:http4k-contract 1.27....

CVE-2026-44503: URL Redirection to Untrusted Site

The RedirectHandler middleware in microsoft/kiota-java com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0 and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie,...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.5.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.5.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.5.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.5.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.7.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.7.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.7.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.7.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.3)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.3 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.4), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.4) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.4)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.4 ...

MITM (Man-in-the-Middle) com.squareup.okhttp3:okhttp Dependency in Jira Software Data Center and Server

This High severity MITM Man-in-the-Middle vulnerability was introduced in version 9.12.1 and 10.3.0 of Jira Software Data Center and Server. This vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of code:java CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Ncode allows an unauthenticated...

Security Bulletin: vulerability in IBM Spectrum Symphony with okhttp component

Summary vulerability in IBM Spectrum Symphony with okhttp component Vulnerability Details CVEID:CVE-2023-0833 DESCRIPTION: A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing...

EUVD-2025-26519

Malicious code in bioql PyPI...

EUVD-2023-44415

Malicious code in bioql PyPI...

EUVD-2023-12835

Malicious code in bioql PyPI...

EUVD-2022-2383

Malicious code in bioql PyPI...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...