Search for packages
Package details: pkg:maven/org.apache.httpcomponents/httpclient@4.3.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.3
Next non-vulnerable version 4.5.13
Latest non-vulnerable version 5.0.3
Risk 3.1
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-crdp-g7p2-byes
Aliases:
CVE-2014-3577
GHSA-cfh5-3ghh-wfjx
certificate verification bypass
4.3.5
Affected by 2 other vulnerabilities.
VCID-mm51-dqss-w7gb
Aliases:
CVE-2020-13956
GHSA-7r82-7xv7-xcpj
multiple issues
4.5.13
Affected by 0 other vulnerabilities.
5.0.3
Affected by 0 other vulnerabilities.
VCID-nn6h-q15u-vbfr
Aliases:
CVE-2015-5262
GHSA-fmj5-wv96-r2ch
4.3.6
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T17:52:45.904346+00:00 GitLab Importer Affected by VCID-mm51-dqss-w7gb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2020-13956.yml 37.0.0
2025-07-03T17:30:05.884924+00:00 GitLab Importer Affected by VCID-crdp-g7p2-byes https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2014-3577.yml 37.0.0
2025-07-03T17:30:03.475569+00:00 GitLab Importer Affected by VCID-nn6h-q15u-vbfr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.httpcomponents/httpclient/CVE-2015-5262.yml 37.0.0
2025-07-03T16:42:25.317699+00:00 GHSA Importer Affected by VCID-nn6h-q15u-vbfr https://github.com/advisories/GHSA-fmj5-wv96-r2ch 37.0.0
2025-07-03T16:42:25.121848+00:00 GHSA Importer Affected by VCID-crdp-g7p2-byes https://github.com/advisories/GHSA-cfh5-3ghh-wfjx 37.0.0