Skip to content
OpenAdvisories

Package · Debian

async-http-client

21 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-107284

    AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, WebSocketHandler.upgrade aborts a handshake whose Sec-WebSocket-Accept value is missing or invali…

    AsyncHttpClient async-http-client async-http-client async-http-client Debian Ubuntu
  • Low 3.7
    CVE-2026-107283

    AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptog…

    AsyncHttpClient async-http-client async-http-client async-http-client Debian Ubuntu Maven