Httpcomponents Core (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 113 known versions, newest CVE from 2026-07-01. Vendor: Apache.

CVEs of Httpcomponents Core

• CVE-2026-54428 - CVSS 7.5 (high), 2026-07-01: Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier)…
• CVE-2026-54399 - CVSS 7.5 (high), 2026-07-01: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier)…