Search for packages
| purl | pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-6amm-pfu5-6bf4
Aliases: CVE-2020-13956 GHSA-7r82-7xv7-xcpj |
Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object and pick the wrong target host for request execution. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-mkuu-7x6y-7kc6
Aliases: CVE-2014-3577 GHSA-cfh5-3ghh-wfjx |
certificate verification bypass |
Affected by 2 other vulnerabilities. |
|
VCID-x63h-y2jy-pyaz
Aliases: CVE-2015-5262 GHSA-fmj5-wv96-r2ch |
Moderate severity vulnerability that affects org.apache.httpcomponents:httpclient http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:42:02.435733+00:00 | GitLab Importer | Affected by | VCID-6amm-pfu5-6bf4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2020-13956.yml | 38.6.0 |
| 2026-06-04T20:16:07.612807+00:00 | GitLab Importer | Affected by | VCID-mkuu-7x6y-7kc6 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2014-3577.yml | 38.6.0 |
| 2026-06-04T20:16:00.661064+00:00 | GitLab Importer | Affected by | VCID-x63h-y2jy-pyaz | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2015-5262.yml | 38.6.0 |