Async-http-client (Async-http-client Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2015-06-24. Vendor: Async-http-client Project.

CVEs of Async-http-client

• CVE-2013-7398 - CVSS 4.3 (medium), 2015-06-24: main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match…
• CVE-2013-7397 - CVSS 4.3 (medium), 2015-06-24: Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location…