Apache Software Foundation Apache HttpComponents

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-278205.4.0 – < 5.4.3Apache HttpComponents: PSL (Public Suffix List) validation bypassHIGH 7.51.0 %