Async-http-client (Asynchttpclient Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 299 known versions, newest CVE from 2026-06-05. Vendor: Asynchttpclient Project.

CVEs of Async-http-client

• CVE-2026-45300 - CVSS 7.4 (high), 2026-06-05: The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Versions on the 2.x…
• CVE-2024-53990 - CVSS 9.2 (critical), 2024-12-02: The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When making any HTTP…
• CVE-2023-0040 - CVSS 7.5 (high), 2023-01-18: Versions of Async HTTP Client prior to 1.13.2 are vulnerable to a form of targeted request manipulation called CRLF injection. This vulnerability was the…
• CVE-2017-14063 - CVSS 7.5 (high), 2017-08-31: Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?'…