Hi Maintainer, I have submitted a new MR with this CVE fix.AHC v2.12.4 - MR link: https://salsa.debian.org/java-team/async-http-client/-/merge_requests/2
Here is the github pull request for more information. https://github.com/AsyncHttpClient/async-http-client/pull/2033 Let me know if you have any questions. Harsh

