Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.httpcomponents/httpclient@4.5.9
purl pkg:maven/org.apache.httpcomponents/httpclient@4.5.9
Next non-vulnerable version 4.5.13
Latest non-vulnerable version 4.5.13
Risk score 2.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-7r82-7xv7-xcpj
Aliases:
CVE-2020-13956
Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in …
4.5.13
Not vulnerable
CVE-2020-13956

Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object …
4.5.13
Not vulnerable
This package is not known to fix any advisories.