Browse CVEs

HIGH 7.5 CVE-2026-46340 Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final … Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-12 MEDIUM 6.8 CVE-2026-45673 Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's D… Netty 4.1.135 / 4.2.15+ Fix from $1,6002026-06-12 HIGH 7.5 CVE-2026-44893 Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and … Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-12 HIGH 7.5 CVE-2026-45416 Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClient… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-12 HIGH 7.5 CVE-2026-44894 Netty is a network application framework for development of protocol servers and clients. NoQuicTokenHandler is the tokenHandler used when the applic… Netty 4.2.15+ Fix from $1,9502026-06-12 HIGH 7.5 CVE-2026-44892 Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, the default configuration of… Netty 4.2.15+ Fix from $1,9502026-06-12 HIGH 8.1 CVE-2026-44249 Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-11 HIGH 7.5 CVE-2026-44250 Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-11 HIGH 7.5 CVE-2026-44890 Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.… Netty 4.1.135 / 4.2.15+ Fix from $1,9502026-06-11 CRITICAL 9.1 CVE-2026-48040 The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C libr… Netty Incubator Codec Ohttp 0.0.22+ Fix from $2,3002026-06-04 MEDIUM 5.3 CVE-2026-41207 The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The by… Netty Incubator Codec Ohttp 0.0.21+ Fix from $1,6002026-06-04 HIGH 7.5 CVE-2026-44248 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section i… Netty 4.1.133 / 4.2.13+ Fix from $1,9502026-05-13 CRITICAL 9.1 CVE-2026-42584 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound res… Netty 4.1.133 / 4.2.13+ Fix from $2,3002026-05-13 HIGH 7.5 CVE-2026-42587 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxA… Netty 4.1.133 / 4.2.13+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-42585 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty incorrectly parses malformed Tra… Netty 4.1.133 / 4.2.13+ Fix from $1,9502026-05-13 HIGH 7.1 CVE-2026-42586 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEn… Netty 4.1.133 / 4.2.13+ Fix from $1,9502026-05-13 CRITICAL 9.8 CVE-2026-42581 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting… Netty 4.1.133 / 4.2.13+ Fix from $2,3002026-05-13 CRITICAL 9.1 CVE-2026-42579 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC… Netty 4.1.133 / 4.2.13+ Fix from $2,3002026-05-13 HIGH 7.5 CVE-2026-42578 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HT… Netty 4.1.133 / 4.2.13+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-42582 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of i… Netty 4.2.13+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-42577 Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and … Netty 4.2.13+ Fix from $1,9502026-05-13 HIGH 7.5 CVE-2026-42583 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of… Netty 4.1.133 / 4.2.13+ Fix from $1,9502026-05-13 MEDIUM 6.5 CVE-2026-42580 Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently ove… Netty 4.1.133 / 4.2.13+ Fix from $1,6002026-05-13 MEDIUM 5.3 CVE-2026-41417 Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later cha… Netty 4.1.133 / 4.2.13+ Fix from $1,6002026-05-06 HIGH 7.5 CVE-2026-33870 Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses q… Netty 4.1.132 / 4.2.10+ Fix from $1,9502026-03-27 HIGH 7.5 CVE-2026-33871 Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger … Netty 4.1.132 / 4.2.10+ Fix from $1,9502026-03-27 MEDIUM 6.5 CVE-2025-67735 Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec… Netty 4.1.129 / 4.2.8+ Fix from $1,6002025-12-16 HIGH 7.5 CVE-2025-58057 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients… Netty 4.1.125 / 4.2.5+ Fix from $1,9502025-09-04 HIGH 7.5 CVE-2025-58056 Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In… Netty 4.1.125 / 4.2.5+ Fix from $1,9502025-09-03 HIGH 7.5 CVE-2025-55163 Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYou… Netty 4.1.124 / 4.2.4+ Fix from $1,9502025-08-13