Known vulnerabilities in Async-http-client - page 2

Software CPE: cpe:2.3:a:asynchttpclient_project:async-http-client:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Async-http-client Async-http-client is affected by 27 known vulnerabilities: 1 high, 18 medium, 8 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142432 - Origin Validation Error
CVE-2026-107280
CWE-346 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU142431 - Incorrect Authorization
CVE-2026-107281
CWE-863 Medium
No
No
2.16.1, 3.0.13 13.08.2026 SB2026081397
#VU134579 - Sensitive Cookie with Improper SameSite Attribute
CVE-2026-55688
CWE-1275 Low
No
No
2.16.0, 3.0.11 16.06.2026 SB2026061604
#VU131339 - Exposure of sensitive information to an unauthorized actor
CVE-2026-45300
CWE-200 Medium
No
No
2.15.0, 3.0.10 13.05.2026 SB2026051366
SB2026061059
#VU125944 - Exposure of sensitive information to an unauthorized actor
CVE-2026-40490
CWE-200 Medium
No
No
3.0.9 14.04.2026 SB2026041462
#VU108785 - Improper input validation
CVE-2017-14063
CWE-20 High
No
No
2.0.35 08.05.2025 SB2017083144
SB2025050812
SB2018091126
#VU101805 - Resource Management Errors
CVE-2024-53990
CWE-399 Low
No
No
3.0.1 16.12.2024 SB2024121687
SB2025020549
SB2025031225
and 1 more


Showing elements 21 - 40 out of 27