{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"async-http-client","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NPSJ6KKK5JQ3NBC3HYNQAD","modified_at":"2026-10-12T19:47:38.201636372Z","published_at":"2026-10-07T22:17:03.497Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-107232","https://security-tracker.debian.org/tracker/CVE-2026-107232"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-107232","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-107232"}],"summary":"The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the client infers that a"}