Known vulnerabilities in Async-http-client

Software CPE: cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Async-http-client Async-http-client is affected by 27 known vulnerabilities: 1 high, 18 medium, 8 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152427 - Improper Authentication
CVE-2026-107228
CWE-287 Low
No
No
3.0.14 28.09.2026 SB20260928258
#VU152426 - Protection Mechanism Failure
CWE-693 Medium
No
No
3.0.14 28.09.2026 SB20260928258
#VU152425 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-107227
CWE-409 Medium
No
No
3.0.14 28.09.2026 SB20260928258
#VU152424 - Session Fixation
CVE-2026-107229
CWE-384 Low
No
No
3.0.14 28.09.2026 SB20260928258
#VU152423 - Incorrect Authorization
CVE-2026-107230
CWE-863 Medium
No
No
3.0.14 28.09.2026 SB20260928258
#VU142452 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-85721
CWE-409 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142451 - Cleartext Transmission of Sensitive Information
CVE-2026-85720
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142450 - Cleartext Transmission of Sensitive Information
CVE-2026-85719
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142449 - Insufficiently Protected Credentials
CVE-2026-85717
CWE-522 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142448 - Missing Release of Resource after Effective Lifetime
CVE-2026-85718
CWE-772 Medium
No
No
3.0.12 13.08.2026 SB2026081397
#VU142447 - Detection of error condition without action
CVE-2026-85716
CWE-390 Low
No
No
3.0.12 13.08.2026 SB2026081397
#VU142446 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142445 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142442 - Insufficiently Protected Credentials
CVE-2026-107285
CWE-522 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142440 - Insufficient Verification of Data Authenticity
CVE-2026-107284
CWE-345 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142438 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-107283
CWE-338 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142436 - Cleartext Transmission of Sensitive Information
CVE-2026-107232
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142435 - Selection of Less-Secure Algorithm During Negotiat
CVE-2026-107231
CWE-757 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142434 - Insufficiently Protected Credentials
CVE-2026-107282
CWE-522 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142433 - Incorrect Implementation of Authentication Algorithm
CVE-2026-107279
CWE-303 Medium
No
No
3.0.13 13.08.2026 SB2026081397


Showing elements 1 - 20 out of 27