Apache Software Foundation Apache Httpcomponents vulnerabilities

1 vulnerability

Known vulnerabilities in Apache Software Foundation Apache Httpcomponents, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2025-27820apache software foundationapache httpcomponents+8
EPSS score
0.95%
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release