`org.apache.httpcomponents.client5:httpclient5`

Ecosystem:
maven

Package URL:
pkg:maven/org.apache.httpcomponents.client5:httpclient5

Total PRs:
843 Dependabot PRs

Latest PR:
22 days ago

Unique Repositories:
341 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

Apache HttpClient disables domain checks

GHSA-73m2-qfq3-56cx CVE-2025-27820 HIGH published about 1 year ago • updated 8 days ago

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered...

Apache HttpClient accepts SCRAM-SHA-256 authentication without proper mutual authentication verification

GHSA-v468-qcjx-r72w CVE-2026-40542 HIGH published 3 months ago • updated 14 days ago

Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication with...

Recent PRs (filtered by: Open )

RSS Feed Clear filter

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6.2

nludd25/kestra #25

5.5.1 → 5.6.2 Minor PR

Open 22 days ago 1 comment

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6.1

binhth-vuejx/kestra-1.3.21 #23

5.5.1 → 5.6.1 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 in /src

nordic-institute/X-Road #3494

5.6 → 5.6.1

Open 3 months ago 8 comments

Bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1

companieshouse/monitor-notification-matcher #31

5.6 → 5.6.1

Open 3 months ago 1 comment

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 in /apps/backend

SimpleAccounts/SimpleAccounts-UAE #719

5.6 → 5.6.1

Open 3 months ago 2 comments

Bump the gradle-all group with 11 updates

opensearch-project/opensearch-migrations #2765

5.6 → 5.6.1

Open 3 months ago 1 comment

chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1 in /backend

raimonvibe/chatbot-java-spring-ai #249

5.6 → 5.6.1

Open 3 months ago 2 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.6 to 5.6.1

baloise-incubator/ms-teams-connector #93

5.6 → 5.6.1

Open 3 months ago 1 comment

chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.6 in /backend

raimonvibe/chatbot-java-spring-ai #225

5.4.3 → 5.6

Open 4 months ago 2 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

huihuizhang321/my_kestra #8

5.5.1 → 5.6

Open 4 months ago 1 comment

chore(deps): bump the java-minor-patch group across 1 directory with 49 updates

nordic-institute/X-Road #3385

5.5.1 → 5.6

Open 4 months ago 1 comment

chore(deps): bump the java-minor-patch group across 1 directory with 45 updates

nordic-institute/X-Road #3380

5.5.1 → 5.6

Open 4 months ago 2 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

yshgnoti/ykestra #1

5.5.1 → 5.6

Open 4 months ago 2 comments

chore(deps): bump the low-risk group across 1 directory with 24 updates

Ensono/stacks-java-cqrs #825

5.5 → 5.6

Open 5 months ago 2 comments

build(deps): bump the client-java group across 1 directory with 27 updates

AKJUS/OpenLineage #247

5.5 → 5.6

Open 5 months ago 2 comments

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

entur/jwt-resource-server #230

5.5.1 → 5.6

Open 6 months ago 1 comment

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6 in the httpcomponents5 group

operaton/operaton #2269

5.5.1 → 5.6

Open 6 months ago 2 comments

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

zalando/riptide #1791

5.5.1 → 5.6

Open 6 months ago 1 comment

Bump the third-party group with 8 updates

openziti/ziti-sdk-jvm #755

5.5.2 → 5.6

Open 6 months ago 1 comment

chore(deps): bump the low-risk group across 1 directory with 24 updates

Ensono/stacks-java-cqrs #807

5.5 → 5.6

Open 6 months ago 7 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5 to 5.6

Sidra51/kestra #51

5.5 → 5.6

Open 6 months ago 1 comment

chore(deps): bump the java-minor-patch group across 1 directory with 35 updates

nordic-institute/X-Road #3221

5.5.1 → 5.6

Open 7 months ago 10 comments

Bump the all-maven-deps group across 3 directories with 40 updates

craftercms/craftercms #8482

5.5 → 5.6

Open 7 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8479

5.5 → 5.6

Open 7 months ago 4 comments

chore(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.3.1 to 5.6

firebase/firebase-admin-java #1166

5.3.1 → 5.6

Open 7 months ago 2 comments

Bump the all-maven-deps group across 3 directories with 64 updates

craftercms/craftercms #8478

5.5 → 5.6

Open 7 months ago 7 comments

Bump the all-maven-deps group across 3 directories with 86 updates

craftercms/craftercms #8474

5.5 → 5.6

Open 7 months ago 3 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

kestra-io/kestra #13818

5.5.1 → 5.6

Open 7 months ago 2 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

OpenRefine/OpenRefine #7595

5.5.1 → 5.6

Open 7 months ago 2 comments

chore(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

cfanbo/intellij-ai-translate #167

5.5.1 → 5.6

Open 7 months ago 1 comment

Bump the gradle-all group with 17 updates

opensearch-project/opensearch-migrations #2100

5.5.1 → 5.6

Open 7 months ago 1 comment

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

josephlbarnett/leakycauldron #704

5.5.1 → 5.6

Open 7 months ago 1 comment

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

awslabs/aws-athena-query-federation #3178

5.5.1 → 5.6

Open 7 months ago 2 comments

build(deps): Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

OpenFeign/feign #3159

5.5.1 → 5.6

Open 7 months ago 1 comment

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6 in /middleware-server

chr-fritz/security-lab-oidc-integrations #102

5.5.1 → 5.6

Open 7 months ago 1 comment

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

allure-framework/allure-maven #404

5.5.1 → 5.6

Open 7 months ago 1 comment

chore(deps): bump the gradle-dependencies group with 14 updates

ai-pipestream/pipestream-platform #17

5.5.1 → 5.6

Open 7 months ago 1 comment

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.6

vividus-framework/vividus #6377

5.5.1 → 5.6

Open 7 months ago 2 comments

Bump org.apache.httpcomponents.client5:httpclient5 from 5.5.1 to 5.5.2

cjmalloy/jasper #493

5.5.1 → 5.5.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump the low-risk group across 1 directory with 22 updates

Ensono/stacks-java #1537

5.5 → 5.5.1

Open 7 months ago 3 comments

Bump the maven-deps group across 1 directory with 13 updates

starwit/observatory #95

5.5 → 5.5.1

Open 7 months ago 2 comments

build(deps): bump the client-java group across 1 directory with 27 updates

AKJUS/OpenLineage #245

5.5 → 5.5.1

Open 8 months ago 6 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.5.1

awslabs/aws-athena-query-federation #3115

5.4.3 → 5.5.1 Minor PR

Open 8 months ago 5 comments

build(deps): bump the integration-spark group across 1 directory with 26 updates

OpenLineage/OpenLineage #4140

5.4.2 → 5.5.1 Minor PR

Open 8 months ago 2 comments

build(deps-dev): bump the httpclient group across 8 directories with 1 update

nicollas1020/serverless_java #6

5.5 → 5.5.1

Open 8 months ago 1 comment

Bump the maven-deps group across 1 directory with 16 updates

starwit/ai-cockpit #323

5.5 → 5.5.1

Open 9 months ago 1 comment

Bump the all-dependencies group across 1 directory with 15 updates

navikt/familie-ef-mottak #1327

5.5 → 5.5.1

Open 9 months ago 2 comments

Bump the third-party group across 1 directory with 30 updates

openziti/ziti-sdk-jvm #725

5.5 → 5.5.1

Open 9 months ago 2 comments

build(deps): bump org.apache.httpcomponents.client5:httpclient5 from 5.4.3 to 5.5.1

DependencyTrack/dependency-track #5475

5.4.3 → 5.5.1 Minor PR

Open 9 months ago 2 comments

chore: Bump the gradle-version-updates group across 1 directory with 8 updates

otto-de/gitactionboard #1120

5.5 → 5.5.1

Open 9 months ago 2 comments

Package Details

Name:	`org.apache.httpcomponents.client5:httpclient5`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.apache.httpcomponents.client5:httpclient5`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 2

View All maven Advisories

Package Information

Description:

Apache HttpComponents Client

Repository:	https://github.com/apache/httpcomponents-client
Homepage:	https://hc.apache.org/httpcomponents-client-5.5.x/5.5/
Latest Release:	`5.4.4` over 1 year ago
Dependent Repos:	1,755
Dependent Packages:	1,024
Ranking:	Top 0.2665% by dependent repos Top 0.0826% by dependent pkgs

PR Status

Open 339 (40.2%)

Merged 152 (18.0%)

Closed 235 (27.9%)

PR Types

Minor 58 (6.9%)

Patch 104 (12.3%)