Vulnerability index

Browse CVEs

68 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Netty HIGH 7.5
CVE-2026-46340

Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final …

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-12
Netty MEDIUM 6.8
CVE-2026-45673

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's D…

Fix: 4.1.135 / 4.2.15+
Fix from $1,600 2026-06-12
Netty HIGH 7.5
CVE-2026-44893

Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and …

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-12
Netty HIGH 7.5
CVE-2026-45416

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClient…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-12
Netty HIGH 7.5
CVE-2026-44894

Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the applic…

Fix: 4.2.15+
Fix from $1,950 2026-06-12
Netty HIGH 7.5
CVE-2026-44892

Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration of…

Fix: 4.2.15+
Fix from $1,950 2026-06-12
Netty HIGH 8.1
CVE-2026-44249

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-11
Netty HIGH 7.5
CVE-2026-44250

Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-11
Netty HIGH 7.5
CVE-2026-44890

Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-11
Netty Incubator Codec Ohttp CRITICAL 9.1
CVE-2026-48040

The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C libr…

Fix: 0.0.22+
Fix from $2,300 2026-06-04
Netty Incubator Codec Ohttp MEDIUM 5.3
CVE-2026-41207

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The by…

Fix: 0.0.21+
Fix from $1,600 2026-06-04
Netty HIGH 7.5
CVE-2026-44248

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section i…

Fix: 4.1.133 / 4.2.13+
Fix from $1,950 2026-05-13
Netty CRITICAL 9.1
CVE-2026-42584

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound res…

Fix: 4.1.133 / 4.2.13+
Fix from $2,300 2026-05-13
Netty HIGH 7.5
CVE-2026-42587

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxA…

Fix: 4.1.133 / 4.2.13+
Fix from $1,950 2026-05-13
Netty HIGH 7.5
CVE-2026-42585

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty incorrectly parses malformed Tra…

Fix: 4.1.133 / 4.2.13+
Fix from $1,950 2026-05-13
Netty HIGH 7.1
CVE-2026-42586

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEn…

Fix: 4.1.133 / 4.2.13+
Fix from $1,950 2026-05-13
Netty CRITICAL 9.8
CVE-2026-42581

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting…

Fix: 4.1.133 / 4.2.13+
Fix from $2,300 2026-05-13
Netty CRITICAL 9.1
CVE-2026-42579

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC…

Fix: 4.1.133 / 4.2.13+
Fix from $2,300 2026-05-13
Netty HIGH 7.5
CVE-2026-42578

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HT…

Fix: 4.1.133 / 4.2.13+
Fix from $1,950 2026-05-13
Netty HIGH 7.5
CVE-2026-42582

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of i…

Fix: 4.2.13+
Fix from $1,950 2026-05-13
Netty HIGH 7.5
CVE-2026-42577

Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and …

Fix: 4.2.13+
Fix from $1,950 2026-05-13
Netty HIGH 7.5
CVE-2026-42583

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of…

Fix: 4.1.133 / 4.2.13+
Fix from $1,950 2026-05-13
Netty MEDIUM 6.5
CVE-2026-42580

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently ove…

Fix: 4.1.133 / 4.2.13+
Fix from $1,600 2026-05-13
Netty MEDIUM 5.3
CVE-2026-41417

Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later cha…

Fix: 4.1.133 / 4.2.13+
Fix from $1,600 2026-05-06
Netty HIGH 7.5
CVE-2026-33870

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses q…

Fix: 4.1.132 / 4.2.10+
Fix from $1,950 2026-03-27
Netty HIGH 7.5
CVE-2026-33871

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger …

Fix: 4.1.132 / 4.2.10+
Fix from $1,950 2026-03-27
Netty MEDIUM 6.5
CVE-2025-67735

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec…

Fix: 4.1.129 / 4.2.8+
Fix from $1,600 2025-12-16
Netty HIGH 7.5
CVE-2025-58057

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients…

Fix: 4.1.125 / 4.2.5+
Fix from $1,950 2025-09-04
Netty HIGH 7.5
CVE-2025-58056

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In…

Fix: 4.1.125 / 4.2.5+
Fix from $1,950 2025-09-03
Netty HIGH 7.5
CVE-2025-55163

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYou…

Fix: 4.1.124 / 4.2.4+
Fix from $1,950 2025-08-13