specially crafted inbound repository URLs can lead to outbound http connection pool starvation

Specially crafted inbound HTTP requests to a repository can trigger outbound proxy repository org.apache.http.conn.ConnectionPoolTimeoutException: Timeout waiting for connection from pool checking remote for update messages. The result is since no new HTTP outbound connections can be retrieved from the outbound connection pool, no repository related outbound HTTP connections can be made for new or updated content.

Mitigation

NXRM admins should restart NXRM to mitigate the immediate pool leak.

If you are a paid customer, contact Sonatype Support for help identifying the problematic requests that can trigger the leak.