Async-http-client Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2015-06-24.

Products

• Async-http-client - 2 CVEs

Newest CVEs of Async-http-client Project

• CVE-2013-7398 - CVSS 4.3 (medium), 2015-06-24: main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match…
• CVE-2013-7397 - CVSS 4.3 (medium), 2015-06-24: Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location…