- How many CVEs does AsyncHttpClient have?
- AsyncHttpClient has 29 published CVE records since 2015, including 24 in the last two years.
- How many AsyncHttpClient CVEs are in CISA KEV?
- None of AsyncHttpClient's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
- Which AsyncHttpClient products have the most CVEs?
- The AsyncHttpClient products with the most published CVEs are async-http-client, org.asynchttpclient:async-http-client, com.ning:async-http-client.
- What are the most common weakness types in AsyncHttpClient CVEs?
- AsyncHttpClient's CVEs most often map to these CWE weakness types: CWE-319 (Cleartext Transmission of Sensitive Information), CWE-287 (Improper Authentication), CWE-345 (Insufficient Verification of Data Authenticity), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
- Are there public exploits for AsyncHttpClient vulnerabilities?
- Yes — 2 of AsyncHttpClient's CVEs have a known public exploit.
- How many critical AsyncHttpClient vulnerabilities are there?
- AsyncHttpClient has 2 critical and 11 high-severity CVEs.
- What is the average severity of AsyncHttpClient CVEs?
- The average CVSS base score across AsyncHttpClient's scored CVEs is 6.5.