CVE-2026-54399

Name of the Vulnerable Software and Affected Versions Apache HttpComponents Core versions prior to 5.4.3 Apache HttpComponents Core versions prior to 5.5-beta2

Description An uncontrolled resource consumption issue exists in the HTTP/1.1 message parser. A remote attacker can trigger a denial of service via memory exhaustion by sending messages containing an excessive number of headers or excessive header length.

Recommendations Update Apache HttpComponents Core to version 5.4.3 or later. Update Apache HttpComponents Core to version 5.5-beta2 or later.