Skip to content
Apache Software Foundation Httpcomponents vulnerabilities
-
apache httpclient, apache software foundation httpcomponents client +1 more
Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)
CVE-2026-71290
Fix available
9.1 Critical
-
apache httpclient, apache software foundation httpcomponents client +1 more
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
CVE-2026-64607
Fix available
5.3 Medium
-
apache httpcomponents core
Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK
CVE-2026-54428
Fix available
7.5 High
-
apache httpcomponents core
Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration
CVE-2026-54399
Fix available
7.5 High
-
apache httpclient, apache software foundation httpcomponents, netapp ontap tools +2 more
Apache HttpComponents: PSL (Public Suffix List) validation bypass
CVE-2025-27820
Fix available
7.5 High