org.http4k:http4k-aws (3.1.3), org.http4k:http4k-client-apache (3.1.3) +17 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.1.3)

org.http4k:http4k-core MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.1.3 - org.http4k:http4k-client-apache 3.1.3 - org.http4k:http4k-client-okhttp 3.1.3 -...

org.http4k:http4k-aws (3.39.1), org.http4k:http4k-client-apache (3.39.1) +26 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.39.1)

org.http4k:http4k-core MAVEN version 3.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.39.1 - org.http4k:http4k-client-apache 3.39.1 - org.http4k:http4k-client-apache-async 3.39...

org.http4k:http4k-aws (3.221.0), org.http4k:http4k-client-apache (3.221.0) +32 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.221.0)

org.http4k:http4k-core MAVEN version 3.221.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.221.0 - org.http4k:http4k-client-apache 3.221.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.241.0), org.http4k:http4k-client-apache (3.241.0) +34 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.241.0)

org.http4k:http4k-core MAVEN version 3.241.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.241.0 - org.http4k:http4k-client-apache 3.241.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.18.0), org.http4k:http4k-client-apache (3.18.0) +23 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.18.0)

org.http4k:http4k-core MAVEN version 3.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.18.0 - org.http4k:http4k-client-apache 3.18.0 - org.http4k:http4k-client-apache-async 3.18...

org.http4k:http4k-client-apache (1.25.1), org.http4k:http4k-client-okhttp (1.25.1) +8 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (1.25.1)

org.http4k:http4k-core MAVEN version 1.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.25.1 - org.http4k:http4k-client-okhttp 1.25.1 - org.http4k:http4k-contract 1.25....

CVE-2026-44503: URL Redirection to Untrusted Site

The RedirectHandler middleware in microsoft/kiota-java com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0 and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie,...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.3)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.3 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.5.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.5.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.5.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.5.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.7.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.7.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.7.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.7.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.4), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.4) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.4)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.4 ...

MITM (Man-in-the-Middle) com.squareup.okhttp3:okhttp Dependency in Jira Software Data Center and Server

This High severity MITM Man-in-the-Middle vulnerability was introduced in version 9.12.1 and 10.3.0 of Jira Software Data Center and Server. This vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of code:java CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Ncode allows an unauthenticated...

Security Bulletin: vulerability in IBM Spectrum Symphony with okhttp component

Summary vulerability in IBM Spectrum Symphony with okhttp component Vulnerability Details CVEID:CVE-2023-0833 DESCRIPTION: A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing...

EUVD-2025-26519

Malicious code in bioql PyPI...

EUVD-2023-12835

Malicious code in bioql PyPI...

EUVD-2023-44415

Malicious code in bioql PyPI...

EUVD-2022-2383

Malicious code in bioql PyPI...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 is vulnerable to authentication bypass due to the use of the MD5 cryptographic hash algorithm. Specifically, the handleDigest() function in OkHttpClientWrapper.java employs MessageDigest.getInstance("MD5") to hash credent...