Skip to content

Apache Software Foundation Apache HttpComponents Client

CVE-2026-71290 Critical 9.1 Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM) 0.3%
CVE-2026-64607 Medium 5.3 Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS 0.5%