Skip to content
Threat Feed
Subscribe

Product

Async-Http-Client (<= 3.0.12)

1 brief RSS
critical advisory

AsyncHttpClient Credential and Request Leakage via Host Replay

A vulnerability in AsyncHttpClient causes sensitive credentials and request details to be leaked to unintended hosts when a request replay or failover is triggered.

async-http-client +3 credential-theft data-leakage library-vulnerability authentication-bypass cve-2026-107230 java
1t 1c