Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.httpcomponents/httpclient@4.5.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.5.3
Next non-vulnerable version 4.5.13
Latest non-vulnerable version 4.5.13
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-7r82-7xv7-xcpj
Aliases:
CVE-2020-13956
Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in …
4.5.13
Not vulnerable
CVE-2020-13956

Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object …
4.5.13
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2011-1498
Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to …