Skip to content
Threat Feed
Subscribe

Product

Async-Http-Client (<= 2.16.0)

1 brief RSS
medium threat

AsyncHttpClient Unbounded Decompression Denial of Service

AsyncHttpClient is vulnerable to a decompression bomb denial of service attack due to unbounded automatic HTTP/1.1 response decompression, potentially leading to heap exhaustion.

exploited async-http-client +1 denial-of-service vulnerability java
1c