How many CVEs have patched setWebSocketMaxDecompressedFrameSize?

1 published CVEs changed setWebSocketMaxDecompressedFrameSize in AsyncHttpClient/async-http-client, in 1 distinct patches totalling 5 changed lines, between 2026 and 2026.

What is the latest CVE that changed setWebSocketMaxDecompressedFrameSize?

CVE-2026-107227 (AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled), published 2026-10-07, changed lines 1426 to 1430 of client/src/main/java/org/asynchttpclient/DefaultAsyncHttpClientConfig.java.

How does setWebSocketMaxDecompressedFrameSize compare to the rest of AsyncHttpClient/async-http-client?

AsyncHttpClient/async-http-client has 25 CVEs with a located fix in total; 1 of them changed setWebSocketMaxDecompressedFrameSize.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

setWebSocketMaxDecompressedFrameSize in AsyncHttpClient/async-http-client: Patched by 1 CVEs

Name: setWebSocketMaxDecompressedFrameSize in AsyncHttpClient/async-http-client: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

setWebSocketMaxDecompressedFrameSize in AsyncHttpClient/async-http-client: Patched by 1 CVEs

setWebSocketMaxDecompressedFrameSize

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track AsyncHttpClient/async-http-client CVEs