Product by Apache Software Foundation
Httpcomponents
4 known vulnerabilities in Httpcomponents (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
4
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-54428 | Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK | 7.5 | |
| High | CVE-2026-54399 | Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration | 7.5 | |
| Critical | CVE-2026-71290 | Apache HttpComponents Client: Improper Certificate Validation | 9.1 | |
| Medium | CVE-2026-64607 | Apache HttpComponents Client: Missing Release of Resource after Effective Lifetime | 5.3 |