Skip to content
Threat Feed
Subscribe

Product

Async-Http-Client (3.0.0 - 3.0.11)

1 brief RSS
medium threat

AsyncHttpClient Unbounded Decompression Denial of Service

AsyncHttpClient is vulnerable to a decompression bomb denial of service attack due to unbounded automatic HTTP/1.1 response decompression, potentially leading to heap exhaustion.

exploited async-http-client +1 denial-of-service vulnerability java
1c