Known vulnerabilities in Async-http-client 3.0.12

Version: 3.0.12
Software CPE: cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Async-http-client version 3.0.12 Async-http-client 3.0.12 is affected by 5 vulnerabilities: 5 medium Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142435 - Selection of Less-Secure Algorithm During Negotiat
CWE-757 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142434 - Insufficiently Protected Credentials
CWE-522 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142433 - Incorrect Implementation of Authentication Algorithm
CWE-303 Medium
No
No
3.0.13 13.08.2026 SB2026081397
#VU142432 - Origin Validation Error
CWE-346 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142431 - Incorrect Authorization
CWE-863 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397