`org.asynchttpclient:async-http-client`

Ecosystem:
maven

Package URL:
pkg:maven/org.asynchttpclient:async-http-client

Total PRs:
51 Dependabot PRs

Latest PR:
13 days ago

Unique Repositories:
36 repositories

Unique Repos (30 days):
5 repositories

Security Advisories

AsyncHttpClient leaks authorization credentials to untrusted domains on cross-origin redirects

GHSA-cmxv-58fp-fm3g CVE-2026-40490 MODERATE published about 2 months ago • updated 7 days ago

### Impact When redirect following is enabled (followRedirect(true)), AsyncHttpClient forwards Authorization and Proxy-Authorization headers along ...

async-http-client: Cookie header not stripped on cross-origin redirect

GHSA-fmxf-pm6p-7xgm CVE-2026-45300 HIGH published 16 days ago • updated 13 days ago

## Summary async-http-client leaks `Cookie` headers to cross-origin redirect targets. When following a redirect across a security boundary (differ...

Improper Input Validation in async-http-client

GHSA-93jq-624g-4p9p CVE-2017-14063 HIGH published over 7 years ago • updated about 1 hour ago

Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI i...

AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

GHSA-mfj5-cf8g-g2fv CVE-2024-53990 CRITICAL published over 1 year ago • updated 2 days ago

### Summary When making any HTTP request, the automatically enabled and self-managed `CookieStore` (aka cookie jar) will silently replace explicit...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): Bump the maven group across 5 directories with 8 updates

nishithakbhaskaran/presto-oss-fix #44

3.0.9 → 3.0.10 Patch PR

Open 13 days ago 1 comment

build(deps): bump org.asynchttpclient:async-http-client from 3.0.8 to 3.0.9 in /projects/async-http-client/project-parent/fuzz-targets in the maven group across 1 directory

0ai-Cyberviser/oss-fuzz #69

3.0.8 → 3.0.9 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the dependencies group with 14 updates

jooby-project/jooby #3833

3.0.4 → 3.0.5 Patch PR

Open 5 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 119 updates

froque/jooby #134

3.0.2 → 3.0.4 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 109 updates

froque/jooby #127

3.0.2 → 3.0.3 Patch PR

Open 8 months ago

build(deps): bump the dependencies group across 1 directory with 106 updates

froque/jooby #125

3.0.2 → 3.0.3 Patch PR

Open 8 months ago 1 comment

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

ArpNetworking/metrics-cluster-aggregator #535

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

ArpNetworking/metrics-aggregator-daemon #570

3.0.2 → 3.0.3 Patch PR

Merged 9 months ago

build(deps): bump the dependencies group across 1 directory with 98 updates

froque/jooby #122

3.0.2 → 3.0.3 Patch PR

Closed 9 months ago 1 comment

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

apache/pinot #16771

3.0.2 → 3.0.3 Patch PR

Merged 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3 in /resources/sdk/purecloudjava-guest/templates

purecloudlabs/platform-client-sdk-common #1145

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

apache/cxf #2585

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 3.0.2 to 3.0.3

hendisantika/vertx-weather-service #54

3.0.2 → 3.0.3 Patch PR

Open 9 months ago

Bump org.asynchttpclient:async-http-client from 2.12.1 to 2.12.4 in /Base

muchq/basepom #15

2.12.1 → 2.12.4 Patch PR

Merged 10 months ago 2 comments

Bump the maven group across 6 directories with 11 updates

offsoc/dubbo #3

2.12.3 → 2.12.4 Patch PR

Closed 10 months ago 1 comment

Bump the maven group across 3 directories with 2 updates

offsoc/trafficcontrol #8

2.12.3 → 2.12.4 Patch PR

Open 10 months ago

Bump org.asynchttpclient:async-http-client from 3.0.1 to 3.0.2

cloudbees-oss/zendesk-java-client #768

3.0.1 → 3.0.2 Patch PR

Open 10 months ago

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4 in /benchmark-framework

aiven/openmessaging-benchmark #4

2.12.3 → 2.12.4 Patch PR

Open 10 months ago

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4

qxlx/dubbo-dubbo-3.2.0 #20

2.12.3 → 2.12.4 Patch PR

Open 11 months ago

build(deps): bump the maven group across 7 directories with 5 updates

AKJUS/dubbo #31

2.12.3 → 2.12.4 Patch PR

Open 11 months ago 1 comment

Bump org.asynchttpclient:async-http-client from 3.0.1 to 3.0.2

apache/druid #18112

3.0.1 → 3.0.2 Patch PR

Open 12 months ago

Bump the maven group across 6 directories with 8 updates

offsoc/dubbo #2

2.12.3 → 2.12.4 Patch PR

Closed about 1 year ago 1 comment

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4

pixelsdb/pixels #884

2.12.3 → 2.12.4 Patch PR

Closed about 1 year ago

Bump org.asynchttpclient:async-http-client from 2.12.3 to 2.12.4 in /springboot-backend

oracle-devrel/oracle-health-ai-open-source #20

2.12.3 → 2.12.4 Patch PR

Merged about 1 year ago

Package Details

Name:	`org.asynchttpclient:async-http-client`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.asynchttpclient:async-http-client`
JSON API:	View JSON

Security Advisories

4

Active advisories

CRITICAL 1

HIGH 2

MODERATE 1

View All maven Advisories

Package Information

Description:

The Async Http Client (AHC) classes.

Repository:	https://github.com/AsyncHttpClient/async-http-client
Homepage:	https://github.com/AsyncHttpClient/async-http-client
Latest Release:	`3.0.2` about 1 year ago
Dependent Repos:	1,449
Dependent Packages:	611
Ranking:	Top 0.3051% by dependent repos Top 0.127% by dependent pkgs

PR Status

Open 25 (49.0%)

Merged 4 (7.8%)

Closed 19 (37.3%)

PR Types

Major 12 (23.5%)

Minor 8 (15.7%)

Patch 24 (47.1%)