The httpclient library is now at version 4.5.8 and Openfire should be updated to use this version.
https://hc.apache.org/httpcomponents-client-ga/index.html