HeroDevs
Visit NES for Apache HttpComponents Home Page

NES for Apache HttpComponents Client 5.1.x Release Notes

2 versions

Comprehensive release notes and changelog for NES for Apache HttpComponents Client 5.1.x, including security patches, bug fixes, and feature updates across all supported versions.

Nov 3, 2026
Latest: 5.1.6
1 Patched Vulnerability
VEX Statements

November 2026

5.1.6

Released Nov 3, 2026
CVE-2026-64607
Full Version: 
5.1.4-httpcomponents-client-5.1.6

Security Fixes

  • ContentCompressionExec no longer leaves the response and its pooled connection open when response decoding fails, and InternalHttpClient now discards the connection endpoint when the exec chain throws (CVE-2026-64607).

October 2026

5.1.5

Released Oct 24, 2026
Full Version: 
5.1.4-httpcomponents-client-5.1.5

Notes

  • This release originates from the open-source Apache HttpComponents Client project forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.
  • This is the initial supported baseline for the 5.1.x line. It is functionally identical to upstream 5.1.4, with no behavioral changes, and contains no vulnerability patches. Security fixes are delivered in subsequent releases on this line.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.