Apache Httpcomponents (Apache Software Foundation) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-04-24. Vendor: Apache Software Foundation.
CVEs of Apache Httpcomponents
- CVE-2025-27820 - CVSS 7.5 (high), 2025-04-24: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the…