AS
Product
async-http-client
24
CVEs
0
On KEV
9.4
Max CVSS
15
New 30D
Severity mix
Critical 1High 9Medium 11Low 3
Watch
Add async-http-client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107284 | 3.7 | Oct 7 | AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept check Affected: >= 3.0.0, < 3.0.12; >= 2.0.0, < 2.16.1 |
| CVE-2026-107283 | 3.7 | Oct 7 | AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random source Affected: >= 3.0.0, < 3.0.12; >= 2.0.0, < 2.16.1 |
| CVE-2026-85716 | 3.7 | Sep 17 | AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified Affected: >= 3.0.8, < 3.0.12 |
Showing 3