agentprime: asynchttpclient-async-http-clientEvery new CVE for asynchttpclient-async-http-client.https://agentprime.io/CVE-2026-102740: AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlinkhttps://agentprime.io/advisories/CVE-2026-102740/https://agentprime.io/advisories/CVE-2026-102740/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 17:25:30 GMTCVECVE-2026-107284: AsyncHttpClient: WebSocket handshake continues after a failed Sec-WebSocket-Accept checkhttps://agentprime.io/advisories/CVE-2026-107284/https://agentprime.io/advisories/CVE-2026-107284/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 21:27:03 GMTCVECVE-2026-107281: AsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identitieshttps://agentprime.io/advisories/CVE-2026-107281/https://agentprime.io/advisories/CVE-2026-107281/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 21:19:09 GMTCVECVE-2026-107279: AsyncHttpClient: Digest mutual authentication is switched off by a peer offering qop=auth-inthttps://agentprime.io/advisories/CVE-2026-107279/https://agentprime.io/advisories/CVE-2026-107279/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 21:10:26 GMTCVECVE-2026-107232: AsyncHttpClient: Origin credentials sent in cleartext to a proxy that rejects the CONNECThttps://agentprime.io/advisories/CVE-2026-107232/https://agentprime.io/advisories/CVE-2026-107232/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 21:09:03 GMTCVECVE-2026-107229: AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hostshttps://agentprime.io/advisories/CVE-2026-107229/https://agentprime.io/advisories/CVE-2026-107229/CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 20:57:36 GMTCVECVE-2026-85718: AsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of servicehttps://agentprime.io/advisories/CVE-2026-85718/https://agentprime.io/advisories/CVE-2026-85718/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 15:58:40 GMTCVECVE-2026-85719: AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTPhttps://agentprime.io/advisories/CVE-2026-85719/https://agentprime.io/advisories/CVE-2026-85719/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 15:52:16 GMTCVE