Vulnerabilities in AsyncHttpClient

4 results

Vexday analysis

AsyncHttpClient apresenta 4 vulnerabilidades catalogadas, com 1 crítica e 2 descobertas nos últimos 90 dias, indicando risco recente. A fraqueza predominante é exposição de informação (CWE-200), embora nenhuma vulnerabilidade esteja sob exploração ativa conhecida no momento.

CVE-2024-53990CRITICALAsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`sEPSS 0.6%CVE-2026-55688MEDIUMAsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStoreEPSS 0.3%CVE-2026-40490MEDIUMAsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirectsEPSS 0.3%CVE-2026-45300HIGHasync-http-client: Cookie header not stripped on cross-origin redirectEPSS 0.3%