org.asynchttpclient:async-http-client vulnerabilities (Red Hat Lightwell)

2 vulnerabilities.

• org.asynchttpclient:async-http-client Red Hat Lightwell AsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStore CVE-2026-55688 Fix available 4.0 MediumJuly 1, 2026
• org.asynchttpclient:async-http-client Red Hat Lightwell async-http-client: Cookie header not stripped on cross-origin redirect CVE-2026-45300 Fix available 7.4 HighMay 18, 2026