Cpe:2.3:a:asynchttpclient:async_http_client:*:*:*:*:*:*:*:*

AsyncHttpClient is vulnerable to a decompression bomb denial of service attack due to unbounded automatic HTTP/1.1 response decompression, potentially leading to heap exhaustion.