Asynchttpclient_project Async-http-client
3 CVEs affecting Asynchttpclient_project Async-http-client. Latest disclosed: 2026-06-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0040 | High | 7.5 | 2023-01-18 | Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the resul… |
CVE-2017-14063 | High | 7.5 | 2017-08-31 | Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' char… |
CVE-2026-45300 | High | 7.4 | 2026-06-05 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Versions on the 2.x branc… |