Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.httpcomponents/httpclient@4.3.6
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.6
Next non-vulnerable version 4.5.13
Latest non-vulnerable version 4.5.13
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-7r82-7xv7-xcpj
Aliases:
CVE-2020-13956
Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in …
4.5.13
Not vulnerable
CVE-2020-13956

Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object …
4.5.13
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-fmj5-wv96-r2ch
Denial of service vulnerability in org.apache.httpcomponents:httpclient http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an … CVE-2015-5262