Vulnerabilities in AsyncHttpClient
25 resultsCVE-2026-107282CRITICALAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostEPSS 0.2%CVE-2026-107230HIGHAsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsEPSS 0.2%CVE-2026-107281HIGHAsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identitiesEPSS 0.2%CVE-2026-107284LOWAsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept checkEPSS 0.1%CVE-2026-102740MEDIUMAsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlinkEPSS 0.1%