[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-107282":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-07T23:06:54.541Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":691,"aliases":692,"duplicate_of":9,"upstream":693,"downstream":694,"duplicates":695,"related":696,"reserved_at":9,"published_at":697,"modified_at":697,"state":698,"summary":699,"references_raw":706,"kevs":730,"epss":9,"epss_history":731,"metrics":732,"affected":739},"CVE-2026-107282","The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13  and 2.16.1, cross-host request replay updates the current request but leaves the target request and related proxy context pointing at the original origin. Connection-pool selection, CONNECT handling, realm selection, and TLS setup can consequently send the original host's path, Host header, Authorization credentials, or plaintext request to the replay destination. Documented ResponseFilter failover and retry paths can trigger the replay. This issue is fixed in versions 3.0.13 and 2.16.1.",null,[11,82,145],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-319","Cleartext Transmission of Sensitive Information","The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.","weakness","Draft","Base","High",[20,24,28,61,65],{"id":21,"name":22,"techniques":23},"CAPEC-102","Session Sidejacking",[],{"id":25,"name":26,"techniques":27},"CAPEC-117","Interception",[],{"id":29,"name":30,"techniques":31},"CAPEC-383","Harvesting Information via API Event Monitoring",[32],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1056.004","Credential API Hooking",[36,39],{"id":37,"name":38},"TA0100","Collection",{"id":40,"name":41},"TA0031","Credential Access",[43,48,53,57],{"id":44,"name":45,"tactic":46},"D3-MBT","Memory Boundary Tracking",{"name":47},"Detect",{"id":49,"name":50,"tactic":51},"D3-PSEP","Process Segment Execution Prevention",{"name":52},"Harden",{"id":54,"name":55,"tactic":56},"D3-SAOR","Segment Address Offset Randomization",{"name":52},{"id":58,"name":59,"tactic":60},"D3-PCSV","Process Code Segment Verification",{"name":47},{"id":62,"name":63,"techniques":64},"CAPEC-477","Signature Spoofing by Mixing Signed and Unsigned Content",[],{"id":66,"name":67,"techniques":68},"CAPEC-65","Sniff Application Code",[69],{"id":70,"name":71,"tactics":72,"countermeasures":77},"T1040","Network Sniffing",[73,74],{"id":40,"name":41},{"id":75,"name":76},"TA0102","Discovery",[78],{"id":79,"name":80,"tactic":81},"D3-DNSTA","DNS Traffic Analysis",{"name":47},{"_key":83,"id":83,"name":84,"description":85,"type":15,"status":16,"abstraction":86,"likelihood_of_exploit":9,"capec":87},"CWE-441","Unintended Proxy or Intermediary ('Confused Deputy')","The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor.","Class",[88,92],{"id":89,"name":90,"techniques":91},"CAPEC-219","XML Routing Detour Attacks",[],{"id":93,"name":94,"techniques":95},"CAPEC-465","Transparent Proxy Abuse",[96],{"id":97,"name":98,"tactics":99,"countermeasures":103},"T1090.001","Internal Proxy",[100],{"id":101,"name":102},"TA0101","Command and Control",[104,108,112,116,120,124,128,133,137,141],{"id":105,"name":106,"tactic":107},"D3-RTSD","Remote Terminal Session Detection",{"name":47},{"id":109,"name":110,"tactic":111},"D3-APCA","Application Protocol Command Analysis",{"name":47},{"id":113,"name":114,"tactic":115},"D3-NTCD","Network Traffic Community Deviation",{"name":47},{"id":117,"name":118,"tactic":119},"D3-CSPP","Client-server Payload Profiling",{"name":47},{"id":121,"name":122,"tactic":123},"D3-CAA","Connection Attempt Analysis",{"name":47},{"id":125,"name":126,"tactic":127},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":47},{"id":129,"name":130,"tactic":131},"D3-NTF","Network Traffic Filtering",{"name":132},"Isolate",{"id":134,"name":135,"tactic":136},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":47},{"id":138,"name":139,"tactic":140},"D3-NTSA","Network Traffic Signature Analysis",{"name":47},{"id":142,"name":143,"tactic":144},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":47},{"_key":146,"id":146,"name":147,"description":148,"type":15,"status":149,"abstraction":86,"likelihood_of_exploit":9,"capec":150},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","Incomplete",[151,153,202,206,263,339,416,470,500,541,600,635,687],{"id":21,"name":22,"techniques":152},[],{"id":154,"name":155,"techniques":156},"CAPEC-474","Signature Spoofing by Key Theft",[157],{"id":158,"name":159,"tactics":160,"countermeasures":162},"T1552.004","Private Keys",[161],{"id":40,"name":41},[163,167,172,176,181,186,190,194,198],{"id":164,"name":165,"tactic":166},"D3-MFA","Multi-factor Authentication",{"name":52},{"id":168,"name":169,"tactic":170},"D3-RIC","Reissue Credential",{"name":171},"Restore",{"id":173,"name":174,"tactic":175},"D3-CH","Credential Hardening",{"name":52},{"id":177,"name":178,"tactic":179},"D3-ANCI","Authentication Cache Invalidation",{"name":180},"Evict",{"id":182,"name":183,"tactic":184},"D3-DUC","Decoy User Credential",{"name":185},"Deceive",{"id":187,"name":188,"tactic":189},"D3-CTS","Credential Transmission Scoping",{"name":132},{"id":191,"name":192,"tactic":193},"D3-CRO","Credential Rotation",{"name":52},{"id":195,"name":196,"tactic":197},"D3-CR","Credential Revocation",{"name":180},{"id":199,"name":200,"tactic":201},"D3-CCSA","Credential Compromise Scope Analysis",{"name":47},{"id":203,"name":204,"techniques":205},"CAPEC-50","Password Recovery Exploitation",[],{"id":207,"name":208,"techniques":209},"CAPEC-509","Kerberoasting",[210],{"id":211,"name":208,"tactics":212,"countermeasures":214},"T1558.003",[213],{"id":40,"name":41},[215,217,219,221,223,225,227,229,231,233,235,237,241,243,245,247,251,253,257,259,261],{"id":182,"name":183,"tactic":216},{"name":185},{"id":138,"name":139,"tactic":218},{"name":47},{"id":109,"name":110,"tactic":220},{"name":47},{"id":113,"name":114,"tactic":222},{"name":47},{"id":105,"name":106,"tactic":224},{"name":47},{"id":142,"name":143,"tactic":226},{"name":47},{"id":177,"name":178,"tactic":228},{"name":180},{"id":129,"name":130,"tactic":230},{"name":132},{"id":187,"name":188,"tactic":232},{"name":132},{"id":168,"name":169,"tactic":234},{"name":171},{"id":173,"name":174,"tactic":236},{"name":52},{"id":238,"name":239,"tactic":240},"D3-RTA","RPC Traffic Analysis",{"name":47},{"id":134,"name":135,"tactic":242},{"name":47},{"id":164,"name":165,"tactic":244},{"name":52},{"id":191,"name":192,"tactic":246},{"name":52},{"id":248,"name":249,"tactic":250},"D3-TB","Token Binding",{"name":52},{"id":117,"name":118,"tactic":252},{"name":47},{"id":254,"name":255,"tactic":256},"D3-TBA","Token-based Authentication",{"name":52},{"id":195,"name":196,"tactic":258},{"name":180},{"id":125,"name":126,"tactic":260},{"name":47},{"id":199,"name":200,"tactic":262},{"name":47},{"id":264,"name":265,"techniques":266},"CAPEC-551","Modify Existing Service",[267],{"id":268,"name":269,"tactics":270,"countermeasures":277},"T1543","Create or Modify System Process",[271,274],{"id":272,"name":273},"TA0110","Persistence",{"id":275,"name":276},"TA0111","Privilege Escalation",[278,282,286,290,294,298,302,306,310,314,318,323,327,331,335],{"id":279,"name":280,"tactic":281},"D3-CF","Content Filtering",{"name":132},{"id":283,"name":284,"tactic":285},"D3-FEV","File Eviction",{"name":180},{"id":287,"name":288,"tactic":289},"D3-FA","File Analysis",{"name":47},{"id":291,"name":292,"tactic":293},"D3-FIM","File Integrity Monitoring",{"name":47},{"id":295,"name":296,"tactic":297},"D3-RF","Restore File",{"name":171},{"id":299,"name":300,"tactic":301},"D3-LFP","Local File Permissions",{"name":132},{"id":303,"name":304,"tactic":305},"D3-RFAM","Remote File Access Mediation",{"name":132},{"id":307,"name":308,"tactic":309},"D3-CQ","Content Quarantine",{"name":132},{"id":311,"name":312,"tactic":313},"D3-CM","Content Modification",{"name":132},{"id":315,"name":316,"tactic":317},"D3-SFA","System File Analysis",{"name":47},{"id":319,"name":320,"tactic":321},"D3-DI","Data Inventory",{"name":322},"Model",{"id":324,"name":325,"tactic":326},"D3-DF","Decoy File",{"name":185},{"id":328,"name":329,"tactic":330},"D3-FE","File Encryption",{"name":52},{"id":332,"name":333,"tactic":334},"D3-RD","Restore Database",{"name":171},{"id":336,"name":337,"tactic":338},"D3-SCP","System Configuration Permissions",{"name":52},{"id":340,"name":341,"techniques":342},"CAPEC-555","Remote Services with Stolen Credentials",[343,375,405],{"id":344,"name":345,"tactics":346,"countermeasures":350},"T1021","Remote Services",[347],{"id":348,"name":349},"TA0109","Lateral Movement",[351,353,355,357,359,361,363,365,369,371,373],{"id":105,"name":106,"tactic":352},{"name":47},{"id":109,"name":110,"tactic":354},{"name":47},{"id":138,"name":139,"tactic":356},{"name":47},{"id":117,"name":118,"tactic":358},{"name":47},{"id":129,"name":130,"tactic":360},{"name":132},{"id":125,"name":126,"tactic":362},{"name":47},{"id":134,"name":135,"tactic":364},{"name":47},{"id":366,"name":367,"tactic":368},"D3-ST","Session Termination",{"name":180},{"id":113,"name":114,"tactic":370},{"name":47},{"id":121,"name":122,"tactic":372},{"name":47},{"id":142,"name":143,"tactic":374},{"name":47},{"id":376,"name":377,"tactics":378,"countermeasures":380},"T1114.002","Remote Email Collection",[379],{"id":37,"name":38},[381,385,389,393,397,401],{"id":382,"name":383,"tactic":384},"D3-ER","Email Removal",{"name":180},{"id":386,"name":387,"tactic":388},"D3-EHB","Endpoint Health Beacon",{"name":47},{"id":390,"name":391,"tactic":392},"D3-NNI","Network Node Inventory",{"name":322},{"id":394,"name":395,"tactic":396},"D3-LLM","Logical Link Mapping",{"name":322},{"id":398,"name":399,"tactic":400},"D3-PLM","Physical Link Mapping",{"name":322},{"id":402,"name":403,"tactic":404},"D3-RNA","Restore Network Access",{"name":171},{"id":406,"name":407,"tactics":408,"countermeasures":413},"T1133","External Remote Services",[409,410],{"id":272,"name":273},{"id":411,"name":412},"TA0108","Initial Access",[414],{"id":366,"name":367,"tactic":415},{"name":180},{"id":417,"name":418,"techniques":419},"CAPEC-560","Use of Known Domain Credentials",[420],{"id":421,"name":422,"tactics":423,"countermeasures":433},"T1078","Valid Accounts",[424,427,430,431,432],{"id":425,"name":426},"TA0030","Defense Evasion",{"id":428,"name":429},"TA0005","Stealth",{"id":272,"name":273},{"id":275,"name":276},{"id":411,"name":412},[434,438,442,446,450,454,458,462,466],{"id":435,"name":436,"tactic":437},"D3-RUAA","Restore User Account Access",{"name":171},{"id":439,"name":440,"tactic":441},"D3-ULA","Unlock Account",{"name":171},{"id":443,"name":444,"tactic":445},"D3-AM","Access Modeling",{"name":322},{"id":447,"name":448,"tactic":449},"D3-AL","Account Locking",{"name":180},{"id":451,"name":452,"tactic":453},"D3-UAP","User Account Permissions",{"name":132},{"id":455,"name":456,"tactic":457},"D3-LAM","Local Account Monitoring",{"name":47},{"id":459,"name":460,"tactic":461},"D3-AA","Agent Authentication",{"name":52},{"id":463,"name":464,"tactic":465},"D3-CDP","Change Default Password",{"name":52},{"id":467,"name":468,"tactic":469},"D3-DAM","Domain Account Monitoring",{"name":47},{"id":471,"name":472,"techniques":473},"CAPEC-561","Windows Admin Shares with Stolen Credentials",[474],{"id":475,"name":476,"tactics":477,"countermeasures":479},"T1021.002","SMB/Windows Admin Shares",[478],{"id":348,"name":349},[480,482,484,486,488,490,492,494,496,498],{"id":117,"name":118,"tactic":481},{"name":47},{"id":125,"name":126,"tactic":483},{"name":47},{"id":138,"name":139,"tactic":485},{"name":47},{"id":109,"name":110,"tactic":487},{"name":47},{"id":121,"name":122,"tactic":489},{"name":47},{"id":134,"name":135,"tactic":491},{"name":47},{"id":113,"name":114,"tactic":493},{"name":47},{"id":105,"name":106,"tactic":495},{"name":47},{"id":129,"name":130,"tactic":497},{"name":132},{"id":142,"name":143,"tactic":499},{"name":47},{"id":501,"name":502,"techniques":503},"CAPEC-600","Credential Stuffing",[504],{"id":505,"name":502,"tactics":506,"countermeasures":508},"T1110.004",[507],{"id":40,"name":41},[509,511,513,515,517,519,521,523,525,527,531,535,537],{"id":134,"name":135,"tactic":510},{"name":47},{"id":142,"name":143,"tactic":512},{"name":47},{"id":117,"name":118,"tactic":514},{"name":47},{"id":125,"name":126,"tactic":516},{"name":47},{"id":138,"name":139,"tactic":518},{"name":47},{"id":129,"name":130,"tactic":520},{"name":132},{"id":109,"name":110,"tactic":522},{"name":47},{"id":113,"name":114,"tactic":524},{"name":47},{"id":105,"name":106,"tactic":526},{"name":47},{"id":528,"name":529,"tactic":530},"D3-AEM","Application Exception Monitoring",{"name":47},{"id":532,"name":533,"tactic":534},"D3-OPM","Operational Process Monitoring",{"name":47},{"id":121,"name":122,"tactic":536},{"name":47},{"id":538,"name":539,"tactic":540},"D3-ANAA","Administrative Network Activity Analysis",{"name":47},{"id":542,"name":543,"techniques":544},"CAPEC-644","Use of Captured Hashes (Pass The Hash)",[545],{"id":546,"name":547,"tactics":548,"countermeasures":551},"T1550.002","Pass the Hash",[549,550],{"id":425,"name":426},{"id":348,"name":349},[552,556,560,564,568,572,576,580,584,588,592,596],{"id":553,"name":554,"tactic":555},"D3-ABPI","Application-based Process Isolation",{"name":132},{"id":557,"name":558,"tactic":559},"D3-PSA","Process Spawn Analysis",{"name":47},{"id":561,"name":562,"tactic":563},"D3-PS","Process Suspension",{"name":180},{"id":565,"name":566,"tactic":567},"D3-HR","Host Reboot",{"name":180},{"id":569,"name":570,"tactic":571},"D3-WSAM","Web Session Access Mediation",{"name":132},{"id":573,"name":574,"tactic":575},"D3-KBPI","Kernel-based Process Isolation",{"name":132},{"id":577,"name":578,"tactic":579},"D3-PT","Process Termination",{"name":180},{"id":581,"name":582,"tactic":583},"D3-SCF","System Call Filtering",{"name":132},{"id":585,"name":586,"tactic":587},"D3-PLA","Process Lineage Analysis",{"name":47},{"id":589,"name":590,"tactic":591},"D3-HS","Host Shutdown",{"name":180},{"id":593,"name":594,"tactic":595},"D3-PSMD","Process Self-Modification Detection",{"name":47},{"id":597,"name":598,"tactic":599},"D3-HBPI","Hardware-based Process Isolation",{"name":132},{"id":601,"name":602,"techniques":603},"CAPEC-645","Use of Captured Tickets (Pass The Ticket)",[604],{"id":605,"name":606,"tactics":607,"countermeasures":610},"T1550.003","Pass the Ticket",[608,609],{"id":425,"name":426},{"id":348,"name":349},[611,613,615,617,619,621,623,625,627,629,631,633],{"id":569,"name":570,"tactic":612},{"name":132},{"id":577,"name":578,"tactic":614},{"name":180},{"id":565,"name":566,"tactic":616},{"name":180},{"id":593,"name":594,"tactic":618},{"name":47},{"id":573,"name":574,"tactic":620},{"name":132},{"id":561,"name":562,"tactic":622},{"name":180},{"id":581,"name":582,"tactic":624},{"name":132},{"id":557,"name":558,"tactic":626},{"name":47},{"id":589,"name":590,"tactic":628},{"name":180},{"id":553,"name":554,"tactic":630},{"name":132},{"id":585,"name":586,"tactic":632},{"name":47},{"id":597,"name":598,"tactic":634},{"name":132},{"id":636,"name":637,"techniques":638},"CAPEC-652","Use of Known Kerberos Credentials",[639],{"id":640,"name":641,"tactics":642,"countermeasures":644},"T1558","Steal or Forge Kerberos Tickets",[643],{"id":40,"name":41},[645,647,649,651,653,655,657,659,661,663,665,667,669,671,673,675,677,679,681,683,685],{"id":254,"name":255,"tactic":646},{"name":52},{"id":129,"name":130,"tactic":648},{"name":132},{"id":113,"name":114,"tactic":650},{"name":47},{"id":109,"name":110,"tactic":652},{"name":47},{"id":238,"name":239,"tactic":654},{"name":47},{"id":187,"name":188,"tactic":656},{"name":132},{"id":125,"name":126,"tactic":658},{"name":47},{"id":168,"name":169,"tactic":660},{"name":171},{"id":199,"name":200,"tactic":662},{"name":47},{"id":164,"name":165,"tactic":664},{"name":52},{"id":177,"name":178,"tactic":666},{"name":180},{"id":134,"name":135,"tactic":668},{"name":47},{"id":195,"name":196,"tactic":670},{"name":180},{"id":117,"name":118,"tactic":672},{"name":47},{"id":182,"name":183,"tactic":674},{"name":185},{"id":191,"name":192,"tactic":676},{"name":52},{"id":248,"name":249,"tactic":678},{"name":52},{"id":173,"name":174,"tactic":680},{"name":52},{"id":105,"name":106,"tactic":682},{"name":47},{"id":142,"name":143,"tactic":684},{"name":47},{"id":138,"name":139,"tactic":686},{"name":47},{"id":688,"name":689,"techniques":690},"CAPEC-653","Use of Known Operating System Credentials",[],[],[],[],[],[],[],"2026-10-07T21:21:29.349Z","Received",{"cisa_kev":700,"cisa_ransomware":700,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":701,"severity_score":702,"severity_version":703,"severity_source":704,"severity_vector":705,"severity_status":698},false,"critical",9.4,"v4.0","cve.org","CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N",[707,713,718,722,726],{"url":708,"sources":709,"tags":711},"https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-jmqq-x5g9-9p2w",[704,710],"nvd",[712],"X Refsource CONFIRM",{"url":714,"sources":715,"tags":716},"https://github.com/AsyncHttpClient/async-http-client/commit/15b254514a411623e5f1d8c99ea79c0f82f8a466",[704,710],[717],"X Refsource MISC",{"url":719,"sources":720,"tags":721},"https://github.com/AsyncHttpClient/async-http-client/commit/bbc31aed3b044f9f7a126cf689a8c8d7ad2ae1cb",[704,710],[717],{"url":723,"sources":724,"tags":725},"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-2.16.1",[704,710],[717],{"url":727,"sources":728,"tags":729},"https://github.com/AsyncHttpClient/async-http-client/releases/tag/async-http-client-project-3.0.13",[704,710],[717],[],[],[733,736],{"source":704,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":734},{"baseScore":702,"baseSeverity":735,"vectorString":705,"impactScore":9,"exploitabilityScore":9},"CRITICAL",{"source":710,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":737},{"baseScore":702,"baseSeverity":735,"vectorString":738,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[740],{"ecosystem":9,"name":741,"vendor":742,"product":741,"cpe_part":743,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":744},"async-http-client","asynchttpclient","a",[745,752],{"version":746,"is_range":747,"range_type":704,"version_start":748,"version_start_type":749,"version_end":750,"version_end_type":751,"fixed_in":9},">= 3.0.0, \u003C 3.0.13",true,"3.0.0","including","3.0.13","excluding",{"version":753,"is_range":747,"range_type":704,"version_start":754,"version_start_type":749,"version_end":755,"version_end_type":751,"fixed_in":9},">= 2.0.0, \u003C 2.16.1","2.0.0","2.16.1"]