Apache Software Foundation Httpcomponents Core vulnerabilities

• apache httpcomponents core Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK CVE-2026-54428 Fix available 7.5 HighJuly 1, 2026
• apache httpcomponents core Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration CVE-2026-54399 Fix available 7.5 HighJuly 1, 2026