[Git][security-tracker-team/security-tracker][master] Add CVE-2026-107226/async-http-client

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cf52ecaa by Salvatore Bonaccorso at 2026-10-13T19:32:48+02:00
Add CVE-2026-107226/async-http-client

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1772,7 +1772,9 @@ CVE-2026-107418 (Missing Authorization vulnerability in Arraytics Booktics bookt
 CVE-2026-107248 (Thelia 3.0.0's back-office Email/Messages feature contains a server\u2 ...)
 	TODO: check
 CVE-2026-107226 (The AsyncHttpClient (AHC) library allows Java applications to easily e ...)
-	TODO: check
+	- async-http-client <unfixed>
+	NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-p2jm-6hj6-9rjg
+	NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/6ec7ee45034d154f502852a962d2891746fb82c1 (async-http-client-project-3.0.14)
 CVE-2026-106605 (Improper Validation of Specified Quantity in Input vulnerability in WP ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-105668 (Protection Mechanism Failure vulnerability in hexpm hex allows the own ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf52ecaafb5702f5da43220e85b56d9efdb40bf8

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cf52ecaafb5702f5da43220e85b56d9efdb40bf8
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261013/d1f99c22/attachment.htm>