Login Request a demo
AS
Product
async-http-client
by AsyncHttpClient · last CVE Oct 15, 2026
24
CVEs
0
On KEV
9.4
Max CVSS
15
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 1High 9Medium 11Low 3
Severity
All severities24Critical1High9Medium11Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add async-http-client to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107282
9.4
0%
Oct 7
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
Affected: >= 3.0.0, < 3.0.13; >= 2.0.0, < 2.16.1
Showing 1