AsyncHttpClient

Thursday, October 8

• GitHub CVE-2026-107282
  AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host

  • AsyncHttpClient async-http-client
  • Critical
  • CVSS 9.4
  • EPSS 0.19%
  • Fixed version listed
  16:30 UTC