org.http4k:http4k-aws (3.199.0), org.http4k:http4k-client-apache (3.199.0) +32 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.199.0)

org.http4k:http4k-core MAVEN version 3.199.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.199.0 - org.http4k:http4k-client-apache 3.199.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.199.1), org.http4k:http4k-client-apache (3.199.1) +32 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.199.1)

org.http4k:http4k-core MAVEN version 3.199.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.199.1 - org.http4k:http4k-client-apache 3.199.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.205.0), org.http4k:http4k-client-apache (3.205.0) +32 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.205.0)

org.http4k:http4k-core MAVEN version 3.205.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.205.0 - org.http4k:http4k-client-apache 3.205.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.212.0), org.http4k:http4k-client-apache (3.212.0) +32 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.212.0)

org.http4k:http4k-core MAVEN version 3.212.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.212.0 - org.http4k:http4k-client-apache 3.212.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.157.1), org.http4k:http4k-client-apache (3.157.1) +31 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.157.1)

org.http4k:http4k-core MAVEN version 3.157.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.157.1 - org.http4k:http4k-client-apache 3.157.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.171.0), org.http4k:http4k-client-apache (3.171.0) +30 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.171.0)

org.http4k:http4k-core MAVEN version 3.171.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.171.0 - org.http4k:http4k-client-apache 3.171.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.173.0), org.http4k:http4k-client-apache (3.173.0) +24 more potentially affected by CVE-2026-100724 via org.http4k:http4k-core (3.173.0)

org.http4k:http4k-core MAVEN version 3.173.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.173.0 - org.http4k:http4k-client-apache 3.173.0 - org.http4k:http4k-client-apache-async...

CVE-2026-44503: URL Redirection to Untrusted Site

The RedirectHandler middleware in microsoft/kiota-java com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0 and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie,...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.5.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.5.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.5.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.5.0 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.4), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.4) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.4)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.4 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.4.3), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.4.3) +3 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.4.3)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.4.3 ...

com.microsoft.kiota:microsoft-kiota-authentication-azure (0.7.0), com.microsoft.kiota:microsoft-kiota-http-okhttp (0.7.0) +4 more potentially affected by CVE-2026-44503 via com.microsoft.kiota:microsoft-kiota-abstractions (0.7.0)

com.microsoft.kiota:microsoft-kiota-abstractions MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.microsoft.kiota:microsoft-kiota-abstractions and may be impacted: - com.microsoft.kiota:microsoft-kiota-authentication-azure 0.7.0 ...

MITM (Man-in-the-Middle) com.squareup.okhttp3:okhttp Dependency in Jira Software Data Center and Server

This High severity MITM Man-in-the-Middle vulnerability was introduced in version 9.12.1 and 10.3.0 of Jira Software Data Center and Server. This vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of code:java CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Ncode allows an unauthenticated...

Security Bulletin: vulerability in IBM Spectrum Symphony with okhttp component

Summary vulerability in IBM Spectrum Symphony with okhttp component Vulnerability Details CVEID:CVE-2023-0833 DESCRIPTION: A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing...

EUVD-2023-44415

Malicious code in bioql PyPI...

EUVD-2022-2383

Malicious code in bioql PyPI...

EUVD-2025-26519

Malicious code in bioql PyPI...

EUVD-2023-12835

Malicious code in bioql PyPI...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...

CVE-2025-56608

The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in OkHttpClientWrapper.java. The handleDigest function employs MessageDigest.getInstance"MD5" to hash credentials. MD5 is a broken cryptographic algorithm known to allow hash collisions...