15 matches found
ROOT-APP-MAVEN-CVE-2026-54428 CVE-2026-54428 in org.apache.httpcomponents.core5:httpcore5-h2 - Patched by Root
Root has patched CVE-2026-54428 in the org.apache.httpcomponents.core5:httpcore5-h2 package for Root:Maven. Multiple fixed versions available...
Security Bulletin: IBM Maximo Application Suite uses httpcore5-h2-5.3.4.jar which is vulnerable to CVE-2026-54428
Summary IBM Maximo Application Suite uses httpcore5-h2-5.3.4.jar which is vulnerable to CVE-2026-54428. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-54428 DESCRIPTION: Allocation of resources without limits or throttling in t...
org.apache.httpcomponents.core5:httpcore5-testing (>=5.5-alpha1, <=5.5-beta1) potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.5-alpha1, <=5.5-beta1)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.5-alpha1, =5.5-alpha1, =5.5-beta1 Source cves: CVE-2026-54428 Source advisory: SNYK:JAVA-ORGAPACHEHTTPCOMPONENTSCORE5-17817217...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16379 more potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.2)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...
org.apache.httpcomponents.core5:httpcore5-testing (>=5.5-alpha1, <=5.5-beta1) potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.5-alpha1, <=5.5-beta1)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.5-alpha1, =5.5-alpha1, =5.5-beta1 Source cves: CVE-2026-54428 Source advisory: GHSA-V3JC-474W-2WM6...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16379 more potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.2)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16379 more potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.2)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...
org.apache.httpcomponents.core5:httpcore5-testing (>=5.5-alpha1, <=5.5-beta1) potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.5-alpha1, <=5.5-beta1)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.5-alpha1, =5.5-alpha1, =5.5-beta1 Source cves: CVE-2026-54428 Source advisory: OSV:GHSA-V3JC-474W-2WM6...
org.apache.httpcomponents.core5:httpcore5-h2 (>=5.5-alpha1, <=5.5-beta1), org.apache.httpcomponents.core5:httpcore5-jackson2 (>=5.5-alpha1, <=5.5-beta1) +2 more potentially affected by CVE-2026-54399 via org.apache.httpcomponents.core5:httpcore5 (>=5.5-alpha1, <=5.5-beta1)
org.apache.httpcomponents.core5:httpcore5 MAVEN version =5.5-alpha1, =5.5-alpha1, =5.5-alpha1, =5.5-alpha1, =5.5-alpha1, =5.5-beta1 Source cves: CVE-2026-54399 Source advisory: OSV:GHSA-HF6X-8P5F-CGMF...
org.apache.httpcomponents.core5:httpcore5-h2 (>=5.5-alpha1, <=5.5-beta1), org.apache.httpcomponents.core5:httpcore5-jackson2 (>=5.5-alpha1, <=5.5-beta1) +2 more potentially affected by CVE-2026-54399 via org.apache.httpcomponents.core5:httpcore5 (>=5.5-alpha1, <=5.5-beta1)
org.apache.httpcomponents.core5:httpcore5 MAVEN version =5.5-alpha1, =5.5-alpha1, =5.5-alpha1, =5.5-alpha1, =5.5-alpha1, =5.5-beta1 Source cves: CVE-2026-54399 Source advisory: GHSA-HF6X-8P5F-CGMF...
org.apache.httpcomponents.core5:httpcore5-testing (5.5-alpha1) potentially affected by CVE-2026-54399 via org.apache.httpcomponents.core5:httpcore5-h2 (5.5-alpha1)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version 5.5-alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.httpcomponents.core5:httpcore5-h2 and may be impacted: - org.apache.httpcomponents.core5:httpcore5-testing 5.5-alpha1 Sourc...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16027 more potentially affected by CVE-2026-54399 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.1)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...
org.apache.httpcomponents.core5:httpcore5-testing (>=5.5-alpha1, <=5.5-beta1) potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.5-alpha1, <=5.5-beta1)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.5-alpha1, =5.5-alpha1, =5.5-beta1 Source cves: CVE-2026-54428 Source advisory: MEND:CVE-2026-54428...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +16379 more potentially affected by CVE-2026-54428 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.4.2)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...
ai.acolite:openai-agent-sdk (>=0.1.0, <=0.4.0), ai.agentican:agentican-framework-core (>=0.1.0-alpha.1, <=0.1.0-alpha.4) +12425 more potentially affected by CVE-2025-8671 via org.apache.httpcomponents.core5:httpcore5-h2 (>=5.0-alpha2, <=5.3.4)
org.apache.httpcomponents.core5:httpcore5-h2 MAVEN version =5.0-alpha2, =0.1.0, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.1, =0.0.4, =0.0.4, =1.0.0, =3.0.0 and more...