Skip to content
OpenAdvisories

Package · Maven

org.asynchttpclient:async-http-client

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-107283

    AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder generates the HTTP Digest client nonce with ThreadLocalRandom rather than a cryptog…

    AsyncHttpClient async-http-client async-http-client async-http-client Debian Ubuntu Maven
  • Low 3.7
    CVE-2026-85716

    AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified

    The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Di…

    AsyncHttpClient async-http-client druid async-http-client Ubuntu Wolfi Maven