AsyncHttpClient async-http-client

• CVE-2026-102740 Medium 5.8 AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink 0.1%
• CVE-2026-107226 Medium 6.8 AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS 0.3%
• CVE-2026-107285 Medium 5.9 AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel 0.2%
• CVE-2026-107284 Low 3.7 AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check 0.1%
• CVE-2026-107283 Low 3.7 AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source 0.3%
• CVE-2026-107282 Critical 9.4 AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host 0.2%
• CVE-2026-107281 High 7.6 AsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identities 0.2%
• CVE-2026-107280 Medium 6.9 AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk 0.3%
• CVE-2026-107279 High 8.8 AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-int 0.4%
• CVE-2026-107232 High 7.5 AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECT 0.2%
• CVE-2026-107231 High 8.7 AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext 0.2%
• CVE-2026-107230 High 7.4 AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins 0.2%
• CVE-2026-107229 Medium 4.0 AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hosts 0.3%
• CVE-2026-107228 Medium 6.8 AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix) 0.3%
• CVE-2026-107227 High 7.5 AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled 0.4%
• CVE-2026-85716 Low 3.7 AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified 0.4%
• CVE-2026-85720 Medium 5.9 AsyncHttpClient: Origin credentials sent to the proxy on the plaintext CONNECT request 0.3%
• CVE-2026-85718 Medium 5.9 AsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of service 0.5%
• CVE-2026-85721 High 7.5 AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service 0.6%
• CVE-2026-85717 Medium 6.8 AsyncHttpClient: Client-wide realm credentials re-sent to a cross-origin redirect target 0.5%
• CVE-2026-85719 High 7.5 AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP 0.4%
• CVE-2026-55688 Medium 4.0 AsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStore 0.3%
• CVE-2026-45300 High 7.4 async-http-client: Cookie header not stripped on cross-origin redirect 0.4%
• CVE-2026-40490 Medium 6.8 AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirects 0.4%
• CVE-2024-53990 Critical 9.2 AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s 0.7%