httpcomponents-core vulnerabilities (Debian)

2 vulnerabilities.

• httpcomponents-core Debian Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK CVE-2026-54428 Fix available 7.5 HighJuly 1, 2026
• httpcomponents-core Debian Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration CVE-2026-54399 Fix available 7.5 HighJuly 1, 2026