httpcomponents-core5 vulnerabilities (Ubuntu)

3 vulnerabilities.

• httpcomponents-core5 Ubuntu Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM) CVE-2026-71290 Fix available 9.1 CriticalAugust 11, 2026
• httpcomponents-core5 Ubuntu Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK CVE-2026-54428 Fix available 7.5 HighJuly 1, 2026
• httpcomponents-core5 Ubuntu Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration CVE-2026-54399 Fix available 7.5 HighJuly 1, 2026