Medium DLA-2405-1 1 CVE

httpcomponents-client - security update

Published Oct 10, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	httpcomponents-client	4.5.2-2+deb9u1

Vulnerabilities 1

Medium 5.3

CVE-2020-13956

Cross-site scripting in Apache HttpClient

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

druid trino trino-plugin-opensearch trino-plugin-lakehouse Debian Ubuntu Wolfi Maven

Dec 2, 2020