Known vulnerabilities in Async-http-client 2.0.0-RC20

Version: 2.0.0-RC20
Software CPE: cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Async-http-client version 2.0.0-RC20 Async-http-client 2.0.0-RC20 is affected by 18 vulnerabilities: 1 high, 12 medium, 5 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142452 - Improper Handling of Highly Compressed Data (Data Amplification)
CWE-409 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142451 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142450 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142449 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142446 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142445 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142442 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142440 - Insufficient Verification of Data Authenticity
CWE-345 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142438 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CWE-338 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142436 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142435 - Selection of Less-Secure Algorithm During Negotiat
CWE-757 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142434 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142432 - Origin Validation Error
CWE-346 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142431 - Incorrect Authorization
CWE-863 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU134579 - Sensitive Cookie with Improper SameSite Attribute
CVE-2026-55688
CWE-1275 Low
No
No
2.16.0, 3.0.11 16.06.2026 SB2026061604
#VU131339 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45300
CWE-200 Medium
No
No
2.15.0, 3.0.10 13.05.2026 SB2026051366
SB2026061059
#VU108785 - Improper input validation
CVE-2017-14063
CWE-20 High
No
No
2.0.35 08.05.2025 SB2017083144
SB2025050812
SB2018091126
#VU101805 - Resource Management Errors
CVE-2024-53990
CWE-399 Low
No
No
3.0.1 16.12.2024 SB2024121687
SB2025020549
SB2025031225
and 1 more