Vendors / Asynchttpclient Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Asynchttpclient Project records in CISA KEV No Asynchttpclient Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 66
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses.
CVSS 3.1 HIGH 7.4· Network · No auth · User interaction · EPSS 0.00399 · Published 2026-06-05 · Fixed in 3.0.10, 2.15.0 CWE-200
Priority LOW 38
Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03046 · Published 2017-08-31 · Partial fix · 2.0.35 CWE-20
Priority LOW 34
Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00564 · Published 2023-01-18 · Fixed in 1.13.2, 1.12.1 +2 CWE-93
Open these records in search → All records by CVSS severity
0 3 0 0 0
THREATIST.IORead the docs