CVE-2026-107284

A flaw was found in async-http-client. When initiating a WebSocket connection, the client aborts handshakes that have missing or invalid validation headers but still proceeds to initialize the processing pipeline. A malicious server can exploit this issue by bundling data frames with an invalid...