Vulnerabilidades em AsyncHttpClient

25 resultados
Análise Vexday

AsyncHttpClient apresenta 4 vulnerabilidades catalogadas, com 1 crítica e 2 descobertas nos últimos 90 dias, indicando risco recente. A fraqueza predominante é exposição de informação (CWE-200), embora nenhuma vulnerabilidade esteja sob exploração ativa conhecida no momento.

CVE-2026-107282CRITICALAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostEPSS 0.2%CVE-2026-107230HIGHAsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsEPSS 0.2%CVE-2026-107281HIGHAsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identitiesEPSS 0.2%CVE-2026-107284LOWAsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept checkEPSS 0.1%CVE-2026-102740MEDIUMAsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlinkEPSS 0.1%