Known vulnerabilities in Async-http-client 2.1.0-alpha19

Version: 2.1.0-alpha19
Software CPE: cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Async-http-client version 2.1.0-alpha19 Async-http-client 2.1.0-alpha19 is affected by 17 vulnerabilities: 12 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142452 - Improper Handling of Highly Compressed Data (Data Amplification)
CWE-409 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142451 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142450 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142449 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142446 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142445 - Improper Link Resolution Before File Access ('Link Following')
CWE-59 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142442 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142440 - Insufficient Verification of Data Authenticity
CWE-345 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142438 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CWE-338 Low
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142436 - Cleartext Transmission of Sensitive Information
CWE-319 Medium
No
No
2.16.1, 3.0.12 13.08.2026 SB2026081397
#VU142435 - Selection of Less-Secure Algorithm During Negotiat
CWE-757 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142434 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142432 - Origin Validation Error
CWE-346 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142431 - Incorrect Authorization
CWE-863 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU134579 - Sensitive Cookie with Improper SameSite Attribute
CVE-2026-55688
CWE-1275 Low
No
No
2.16.0, 3.0.11 16.06.2026 SB2026061604
#VU131339 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45300
CWE-200 Medium
No
No
2.15.0, 3.0.10 13.05.2026 SB2026051366
SB2026061059
#VU101805 - Resource Management Errors
CVE-2024-53990
CWE-399 Low
No
No
3.0.1 16.12.2024 SB2024121687
SB2025020549
SB2025031225
and 1 more