Apache Software Foundation Apache HttpComponents Client vulnerabilities
2 published CVEs name Apache Software Foundation Apache HttpComponents Client among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-71290
Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)
Apache Software Foundation · Apache HttpComponents Client
Critical9.1 - CVE-2026-64607
Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS
Apache Software Foundation · Apache HttpComponents Client
Medium5.3