CVE security advisories and vulnerability history for async-http-client by AsyncHttpClient.
29
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
2
Public exploits
PoC or exploit code
6.5
Avg CVSS
2015–2026
Last updated
Overview
AsyncHttpClient async-http-client has 29 published CVE records since 2015, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.
Severity and exploitation
How the CVSS severity of AsyncHttpClient async-http-client's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical2
High11
Medium13
Low3
In CISA’s Known Exploited Vulnerabilities catalog
0
None of AsyncHttpClient async-http-client's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of AsyncHttpClient async-http-client's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every AsyncHttpClient async-http-client version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about AsyncHttpClient async-http-client vulnerabilities.
How many CVEs does AsyncHttpClient async-http-client have?
AsyncHttpClient async-http-client has 29 published CVE records since 2015.
How many AsyncHttpClient async-http-client CVEs are in CISA KEV?
None of AsyncHttpClient async-http-client's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for AsyncHttpClient async-http-client vulnerabilities?
Yes — 2 of AsyncHttpClient async-http-client's CVEs have a known public exploit.
Which versions of AsyncHttpClient async-http-client are affected?
318 distinct AsyncHttpClient async-http-client versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in AsyncHttpClient async-http-client CVEs?
AsyncHttpClient async-http-client's CVEs most often map to these CWE weakness types: CWE-319 (Cleartext Transmission of Sensitive Information), CWE-287 (Improper Authentication), CWE-345 (Insufficient Verification of Data Authenticity), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical AsyncHttpClient async-http-client vulnerabilities are there?
AsyncHttpClient async-http-client has 2 critical and 11 high-severity CVEs.
What is the average severity of AsyncHttpClient async-http-client CVEs?
The average CVSS base score across AsyncHttpClient async-http-client's scored CVEs is 6.5.
