[Git][security-tracker-team/security-tracker][master] Add CVE-2026-102740/async-http-client

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
95b2843d by Salvatore Bonaccorso at 2026-10-17T15:06:59+02:00
Add CVE-2026-102740/async-http-client

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2069,7 +2069,11 @@ CVE-2026-102946 (joserfc is a Python library that provides an implementation of
 	NOTE: https://github.com/authlib/joserfc/security/advisories/GHSA-4pp3-559j-c5c2
 	NOTE: Fixed by: https://github.com/authlib/joserfc/commit/f409f8f058225d7686acab6546c94593e4c1bfbe (1.7.4)
 CVE-2026-102740 (The AsyncHttpClient library allows Java applications to execute HTTP r ...)
-	TODO: check
+	- async-http-client <unfixed>
+	NOTE: https://github.com/AsyncHttpClient/async-http-client/security/advisories/GHSA-cf59-3jcr-vfhw
+	NOTE: https://github.com/AsyncHttpClient/async-http-client/pull/2281
+	NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/0422e11c954c4b026e986d1458f7a7a2eab7e591 (async-http-client-project-2.16.1)
+	NOTE: Fixed by: https://github.com/AsyncHttpClient/async-http-client/commit/d945ce3357b093e74526871cd309832a717ecfda (async-http-client-project-3.0.12)
 CVE-2026-102631 (In authd before 0.7.1, the user identity matching in UpdateUser (inter ...)
 	NOT-FOR-US: Canonical authd
 CVE-2026-102527 (Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95b2843d01ee7b9c08bb150ec33a6be4f283200c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/95b2843d01ee7b9c08bb150ec33a6be4f283200c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261017/c6310b08/attachment-0001.htm>