`org.asynchttpclient:async-http-client`

Ecosystem:
maven

Package URL:
pkg:maven/org.asynchttpclient:async-http-client

Total PRs:
51 Dependabot PRs

Latest PR:
13 days ago

Unique Repositories:
36 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirects

GHSA-cmxv-58fp-fm3g CVE-2026-40490 MODERATE published about 2 months ago • updated 6 days ago

### Impact When redirect following is enabled (followRedirect(true)), AsyncHttpClient forwards Authorization and Proxy-Authorization headers along ...

async-http-client: Cookie header not stripped on cross-origin redirect

GHSA-fmxf-pm6p-7xgm CVE-2026-45300 HIGH published 15 days ago • updated 13 days ago

## Summary async-http-client leaks `Cookie` headers to cross-origin redirect targets. When following a redirect across a security boundary (differ...

Improper Input Validation in async-http-client

GHSA-93jq-624g-4p9p CVE-2017-14063 HIGH published over 7 years ago • updated 19 minutes ago

Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI i...

AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

GHSA-mfj5-cf8g-g2fv CVE-2024-53990 CRITICAL published over 1 year ago • updated 2 days ago

### Summary When making any HTTP request, the automatically enabled and self-managed `CookieStore` (aka cookie jar) will silently replace explicit...

Recent PRs

RSS Feed

chore(deps): Bump the maven group across 5 directories with 8 updates

nishithakbhaskaran/presto-oss-fix #44

3.0.9 → 3.0.10 Patch PR

Open 13 days ago 1 comment

Bump the maven group across 8 directories with 10 updates

vicaya/pulsar #9

2.7.0 → 2.15.0 Minor PR

Closed 15 days ago 1 comment

Bump the maven group across 7 directories with 16 updates

vishakha-mali/dubbo #7

2.12.4 → 2.15.0 Minor PR

Closed 15 days ago 1 comment

Bump the maven group across 2 directories with 6 updates

Takuya-Miyazaki/pulsar #33

2.12.4 → 2.14.5 Minor PR

Closed about 1 month ago 1 comment

Bump the maven group across 18 directories with 24 updates

abrahem79/glowroot #5

2.12.3 → 2.14.5 Minor PR

Open about 1 month ago 2 comments

build(deps): bump org.asynchttpclient:async-http-client from 3.0.8 to 3.0.9 in /projects/async-http-client/project-parent/fuzz-targets in the maven group across 1 directory

0ai-Cyberviser/oss-fuzz #69

3.0.8 → 3.0.9 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the maven group across 8 directories with 12 updates

0ai-Cyberviser/oss-fuzz #6

Fuzzing-SNAPSHOT → 2.0.35

Closed 2 months ago 1 comment

Bump the maven group across 9 directories with 21 updates

yathin51/tutorials #18

2.2.0 → 2.12.4 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the dependencies group with 14 updates

jooby-project/jooby #3833

3.0.4 → 3.0.5 Patch PR

Open 5 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 119 updates

froque/jooby #134

3.0.2 → 3.0.4 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 109 updates

froque/jooby #127

3.0.2 → 3.0.3 Patch PR

Open 8 months ago

build(deps): bump the dependencies group across 1 directory with 106 updates

froque/jooby #125

3.0.2 → 3.0.3 Patch PR

Open 8 months ago 1 comment

Bump org.asynchttpclient:async-http-client from 2.5.3 to 3.0.3

suneet-s/druid #407

2.5.3 → 3.0.3 Major PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

ArpNetworking/metrics-cluster-aggregator #535

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

ArpNetworking/metrics-aggregator-daemon #570

3.0.2 → 3.0.3 Patch PR

Merged 9 months ago

build(deps): bump the dependencies group across 1 directory with 98 updates

froque/jooby #122

3.0.2 → 3.0.3 Patch PR

Closed 9 months ago 1 comment

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

apache/pinot #16771

3.0.2 → 3.0.3 Patch PR

Merged 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3 in /resources/sdk/purecloudjava-guest/templates

purecloudlabs/platform-client-sdk-common #1145

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

chore(deps): bump org.asynchttpclient:async-http-client from 2.12.3 to 3.0.3

mjeanroy/junit-servers #885

2.12.3 → 3.0.3 Major PR

Closed 9 months ago

Bump org.asynchttpclient:async-http-client from 2.12.4 to 3.0.3

DmitriiMukhin/blynk-server #34

2.12.4 → 3.0.3 Major PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

apache/cxf #2585

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

hendisantika/vertx-weather-service #54

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 2.12.1 to 2.12.4 in /Base

muchq/basepom #15

2.12.1 → 2.12.4 Patch PR

Merged 10 months ago 2 comments

Bump the maven group across 6 directories with 11 updates

offsoc/dubbo #3

2.12.3 → 2.12.4 Patch PR

Closed 10 months ago 1 comment

Bump the maven group across 3 directories with 2 updates

offsoc/trafficcontrol #8

2.12.3 → 2.12.4 Patch PR

Open 10 months ago

Bump org.asynchttpclient:async-http-client from 3.0.1 to 3.0.2

cloudbees-oss/zendesk-java-client #768

3.0.1 → 3.0.2 Patch PR

Open 10 months ago

Maven: Bump org.asynchttpclient:async-http-client from 2.12.4 to 3.0.2 in /here-oauth-client-dist

heremaps/here-aaa-java-sdk #146

2.12.4 → 3.0.2 Major PR

Open 10 months ago 1 comment

Maven: Bump org.asynchttpclient:async-http-client from 2.12.4 to 3.0.2 in /examples/here-oauth-client-example

heremaps/here-aaa-java-sdk #145

2.12.4 → 3.0.2 Major PR

Closed 10 months ago 1 comment

Maven: Bump org.asynchttpclient:async-http-client from 2.12.4 to 3.0.2 in /here-oauth-client

heremaps/here-aaa-java-sdk #142

2.12.4 → 3.0.2 Major PR

Open 10 months ago 2 comments

Maven: Bump org.asynchttpclient:async-http-client from 2.12.4 to 3.0.2

heremaps/here-aaa-java-sdk #137

2.12.4 → 3.0.2 Major PR

Open 10 months ago 1 comment

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4 in /benchmark-framework

aiven/openmessaging-benchmark #4

2.12.3 → 2.12.4 Patch PR

Open 10 months ago

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4

qxlx/dubbo-dubbo-3.2.0 #20

2.12.3 → 2.12.4 Patch PR

Open 11 months ago

build(deps): bump the maven group across 7 directories with 5 updates

AKJUS/dubbo #31

2.12.3 → 2.12.4 Patch PR

Open 11 months ago 1 comment

build(deps): bump the maven group across 15 directories with 20 updates

google/oss-fuzz #13583

Fuzzing-SNAPSHOT → 2.0.35

Open 11 months ago

Bump org.asynchttpclient:async-http-client from 3.0.1 to 3.0.2

apache/druid #18112

3.0.1 → 3.0.2 Patch PR

Open 12 months ago

Bump the maven group across 6 directories with 8 updates

offsoc/dubbo #2

2.12.3 → 2.12.4 Patch PR

Closed about 1 year ago 1 comment

build(deps): bump the maven group across 15 directories with 20 updates

google/oss-fuzz #13377

Fuzzing-SNAPSHOT → 2.0.35

Open about 1 year ago

build(deps): bump the maven group across 15 directories with 19 updates

larseggert/oss-fuzz #2

Fuzzing-SNAPSHOT → 2.0.35

Closed about 1 year ago 1 comment

Bump org.asynchttpclient:async-http-client from 2.10.4 to 2.12.4 in /obp-api

OpenBankProject/OBP-API #2544

2.10.4 → 2.12.4 Minor PR

Open about 1 year ago

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4

pixelsdb/pixels #884

2.12.3 → 2.12.4 Patch PR

Closed about 1 year ago

Bump the maven group across 10 directories with 32 updates

thismahbub/tutorials #1

2.2.0 → 2.12.4 Minor PR

Open about 1 year ago

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4 in /springboot-backend

oracle-devrel/oracle-health-ai-open-source #20

2.12.3 → 2.12.4 Patch PR

Merged about 1 year ago

Bump org.asynchttpclient:async-http-client from 2.5.3 to 3.0.2

isandeep41/druid #205

2.5.3 → 3.0.2 Major PR

Closed about 1 year ago 2 comments

Bump org.asynchttpclient:async-http-client from 2.5.3 to 2.12.4

isandeep41/druid #202

2.5.3 → 2.12.4 Minor PR

Closed about 1 year ago 2 comments

Bump org.asynchttpclient:async-http-client from 2.5.3 to 3.0.2

abhishekrb19/incubator-druid #182

2.5.3 → 3.0.2 Major PR

Open about 1 year ago 3 comments

Bump org.asynchttpclient:async-http-client from 2.5.3 to 3.0.2

suneet-s/druid #352

2.5.3 → 3.0.2 Major PR

Closed about 1 year ago 1 comment

Bump org.asynchttpclient:async-http-client from 2.12.3 to 3.0.1

clescot/kafka-connect-http #644

2.12.3 → 3.0.1 Major PR

Closed over 1 year ago 1 comment

Bump org.asynchttpclient:async-http-client from 2.10.4 to 3.0.1 in /obp-api

OpenBankProject/OBP-API #2465

2.10.4 → 3.0.1 Major PR

Closed over 1 year ago 2 comments

Package Details

Name:	`org.asynchttpclient:async-http-client`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.asynchttpclient:async-http-client`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 1

HIGH 2

MODERATE 1

View All maven Advisories

Package Information

Description:

The Async Http Client (AHC) classes.

Repository:	https://github.com/AsyncHttpClient/async-http-client
Homepage:	https://github.com/AsyncHttpClient/async-http-client
Latest Release:	`3.0.2` about 1 year ago
Dependent Repos:	1,449
Dependent Packages:	611
Ranking:	Top 0.3051% by dependent repos Top 0.127% by dependent pkgs

PR Status

Open 25 (49.0%)

Merged 4 (7.8%)

Closed 19 (37.3%)

PR Types

Major 12 (23.5%)

Minor 8 (15.7%)

Patch 24 (47.1%)