CPE
critical
advisory
AsyncHttpClient Credential and Request Leakage via Host Replay
1 TTP 1 CVEA vulnerability in AsyncHttpClient causes sensitive credentials and request details to be leaked to unintended hosts when a request replay or failover is triggered.
async-http-client +3
credential-theft
data-leakage
library-vulnerability
authentication-bypass
cve-2026-107230
java
1t
1c
medium
threat
AsyncHttpClient Unbounded Decompression Denial of Service
1 CVEAsyncHttpClient is vulnerable to a decompression bomb denial of service attack due to unbounded automatic HTTP/1.1 response decompression, potentially leading to heap exhaustion.
exploited
async-http-client +1
denial-of-service
vulnerability
java
1c