com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85717 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85717 Source advisory: OSV:GHSA-F8M2-889X-VW4X...

Insufficiently Protected Credentials

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the redirect authentication path in Interceptors.java. An attacker can obtain client-wide realm...

be.wegenenverkeer:rxhttpclient (2.0.1), be.wegenenverkeer:rxhttpclient-fs2_2.13 (2.0.1) +103 more potentially affected by CVE-2026-85717 via org.asynchttpclient:async-http-client (>=2.14.5, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.14.5, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =4.0.14.0 and more Source cves: CVE-2026-85717 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-19963951...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85717 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85717 Source advisory: GHSA-F8M2-889X-VW4X...

be.wegenenverkeer:rxhttpclient (2.0.1), be.wegenenverkeer:rxhttpclient-fs2_2.13 (2.0.1) +103 more potentially affected by CVE-2026-85717 via org.asynchttpclient:async-http-client (>=2.14.5, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.14.5, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =3.0.18.0, =4.0.14.0 and more Source cves: CVE-2026-85717 Source advisory: GHSA-F8M2-889X-VW4X...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-85720 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-85720 Source advisory: GHSA-XR57-GCX8-52HF...

Insufficiently Protected Credentials

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the newNettyRequest and writeRequest/sendRequestWithNewChannel paths in NettyRequestFactory and...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-85720 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-85720 Source advisory: OSV:GHSA-XR57-GCX8-52HF...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2862 more potentially affected by CVE-2026-85721 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-85721 Source advisory: GHSA-7GRG-JCF7-RPMX...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through ChannelManager.newHttpContentDecompressor in...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +92 more potentially affected by CVE-2026-85721 via org.asynchttpclient:async-http-client (>=3.0.0, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-85721 Source advisory: OSV:GHSA-7GRG-JCF7-RPMX...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85716 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85716 Source advisory: GHSA-FJ9W-C36G-H5X8...

Detection of Error Condition Without Action

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Detection of Error Condition Without Action via the SCRAM processScramAuthenticationInfo path and the Digest processAuthenticationInfo path i...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85716 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85716 Source advisory: OSV:GHSA-FJ9W-C36G-H5X8...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85716 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85716 Source advisory: MEND:CVE-2026-85716...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2862 more potentially affected by CVE-2026-85721 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-85721 Source advisory: MEND:CVE-2026-85721...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.4-rc1, <=6.0.5), com.cloudbees.thirdparty:zendesk-java-client (>=1.5.0, <=1.6.1) +43 more potentially affected by CVE-2026-85717 via org.asynchttpclient:async-http-client (>=3.0.9, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.9, =6.0.4-rc1, =1.5.0, =5.0.0, =5.0.0, =1.17.15, =1.17.15, =1.17.15, =252.1.0, =11.2.1, =2.0.0, =4.20.0, =4.20.0, =4.23.0 and more Source cves: CVE-2026-85717 Source advisory: MEND:CVE-2026-85717...

ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), app.peac:core (0.0.1) +2428 more potentially affected by CVE-2026-85719 via org.asynchttpclient:async-http-client (>=2.1.0, <=2.16.0)

org.asynchttpclient:async-http-client MAVEN version =2.1.0, =1.7, =4.1.0, =4.0.0-beta.2, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.7.0, =0.7.0, =0.1.0, =0.2.0, =0.9.2 and more Source cves: CVE-2026-85719 Source advisory: MEND:CVE-2026-85719...

ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2861 more potentially affected by CVE-2026-55688 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.15.0)

org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-55688 Source advisory: OSV:GHSA-M452-Q8C9-RG2F...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.4), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +96 more potentially affected by CVE-2026-55688 via org.asynchttpclient:async-http-client (>=3.0.0.beta1, <=3.0.10)

org.asynchttpclient:async-http-client MAVEN version =3.0.0.beta1, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =2.7.3, =2.8.5 and more Source cves: CVE-2026-55688 Source advisory: OSV:GHSA-M452-Q8C9-RG2F...