HT
Product
Httpclient
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch
Add Httpclient to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27820 | 7.5 | Apr 24 | A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification Affected: 5.4 before 5.4.3 |
| CVE-2026-40542 | 7.3 | Apr 22 | Apache HttpClient: SCRAM-SHA-256 mutual authentication bypass may cause the client to accept authentication without proper mutual authentication verification Affected: 5.6 |
Showing 2