HT
Product
Httpclient
by Apache · last CVE Aug 11, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch

Add Httpclient to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-64607
5.3
0%
Jul 31
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
Affected: 5.0.0 before 5.6.3
CVE-2020-13956
5.3
9%
Dec 2
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick…
Affected: before 4.5.13; 5.0.0 before 5.0.3
Showing 2