AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target
Maven org.asynchttpclient:async-http-client · Upgrade to 3.0.12 or 2.16.1 by release line · >= 3.0.9, <= 3.0.11; >= 2.14.5, <= 2.16.0 · CVE-2026-85717 · GHSA-f8m2-889x-vw4x · amended