VendorsApachehttpcomponents_coreall versions
Vulnerabilities

Apache HttpComponents Core (HttpCore)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-54399
Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration
Published 2026-07-01 · Analyzed
7.5EPSS 0.009
CVE-2026-54428
Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK
Published 2026-07-01 · Analyzed
7.5EPSS 0.009