Red Hat JBoss Enterprise Application Platform Expansion Pack/org.asynchttpclient/async-http-client

Red Hat · Package

1 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirectsCVE-2026-40490 · GHSA-CMXV-58FP-FM3G	org.asynchttpclient:async-http-client Red Hat Fuse 7/org.asynchttpclient/async-http-client	MavenRed Hat	Medium	Fix reported	2026-09-10