Skip to content

Conversation

@aikido-autofix
Copy link

Targeted updates to remediate security findings while preserving existing behavior

Upgrade httpclient to mitigate URI parsing vulnerability that could lead to incorrect host targeting and potential request redirection risks.

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2020-13956
MEDIUM
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
🔗 Related Tasks

@aikido-autofix aikido-autofix bot added the Kroo Label created by Aikido AutoFix label Jan 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Kroo Label created by Aikido AutoFix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant