Skip to content
OpenAdvisories

Package · Debian

async-http-client

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-85721 Public exploit

    AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, automatic response decompression on the HTTP/1.1 path uses ChannelManager.newHttpContentD…

    AsyncHttpClient async-http-client async-http-client async-http-client Debian Ubuntu Maven