Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.httpcomponents/httpclient@4.4-alpha1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.4-alpha1
Next non-vulnerable version 4.5.13
Latest non-vulnerable version 4.5.13
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-6amm-pfu5-6bf4
Aliases:
CVE-2020-13956
GHSA-7r82-7xv7-xcpj
Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object and pick the wrong target host for request execution.
4.5.13
Affected by 0 other vulnerabilities.
5.0.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:42:02.471907+00:00 GitLab Importer Affected by VCID-6amm-pfu5-6bf4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2020-13956.yml 38.6.0