Security
فارسی
All products

Red Hat Fuse 7/async-http-client

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)CVE-2026-107228 · GHSA-2JWH-9RMR-J4XF org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Medium Fix reported
AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSCVE-2026-107226 · GHSA-P2JM-6HJ6-9RJG org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Medium Fix reported
AsyncHttpClient: Digest authentication cnonce generated with a non-cryptographic random sourceCVE-2026-107283 · GHSA-MFJ3-87QQ-382V org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Low Fix reported
AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukCVE-2026-107280 · GHSA-F9M8-CV68-674W org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Medium Fix reported
AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnelCVE-2026-107285 · GHSA-3WP9-XFWM-RJJF org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Medium Fix reported
AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responsesCVE-2026-85716 · GHSA-FJ9W-C36G-H5X8 org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Low Fix reported
AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT requestCVE-2026-85720 · GHSA-XR57-GCX8-52HF org.asynchttpclient:async-http-clientRed Hat Fuse 7/async-http-client MavenRed Hat Medium Fix reported
org.asynchttpclient/async-http-client: async-http-client: Cross-domain cookie injection via incomplete cookie domain validationCVE-2026-107229 Red Hat Fuse 7/async-http-client Red Hat Medium No fix reported
org.asynchttpclient/async-http-client: AsyncHttpClient: Privilege escalation via connection pool reuseCVE-2026-107281 Red Hat Fuse 7/async-http-client Red Hat Medium No fix reported
org.asynchttpclient/async-http-client: async-http-client: Processing of unverified WebSocket frames via improper handshake validationCVE-2026-107284 Red Hat Fuse 7/async-http-client Red Hat Low No fix reported
org.asynchttpclient/async-http-client: AsyncHttpClient: Arbitrary file overwrite via insecure temporary file handlingCVE-2026-102740 Red Hat Fuse 7/async-http-client Red Hat Medium No fix reported
org.asynchttpclient/async-http-client: AsyncHttpClient: Denial of Service via TLS handshake failureCVE-2026-85718 Red Hat Fuse 7/async-http-client Red Hat Medium No fix reported