Login Request a demo
AS
Product
async-http-client
by AsyncHttpClient · last CVE Oct 15, 2026
25
CVEs
0
On KEV
9.4
Max CVSS
15
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 2High 9Medium 11Low 3
Severity
All severities25Critical2High9Medium11Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add async-http-client to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107282
9.4
0%
Oct 7
AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host
Affected: >= 3.0.0, < 3.0.13; >= 2.0.0, < 2.16.1
CVE-2024-53990
9.2
1%
Dec 2
AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s
Affected: < 3.0.1
Showing 2