Browse CVEs

MEDIUM 5.5 CVE-2025-25193 Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe read… Netty 4.1.118+ Fix from $1,6002025-02-10 MEDIUM 5.5 CVE-2024-47535 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients… Netty 4.1.115+ Fix from $1,6002024-11-12 HIGH 8.1 CVE-2024-40642 The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate i… Netty Incubator Codec Ohttp 0.0.13+ Fix from $1,9502024-07-18 CRITICAL 9.1 CVE-2024-36121 netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and us… Netty Incubator Codec Ohttp 0.0.11+ Fix from $2,3002024-06-04 MEDIUM 6.5 CVE-2023-34462 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients… Netty 4.1.94+ Fix from $1,6002023-06-22 HIGH 7.5 CVE-2015-2156EPSS 5% Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 mig… Netty after 3.9.7 Fix from $1,9502017-10-18 MEDIUM 5.0 CVE-2014-3488 The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hell… Netty after 3.9.1.1 Fix from $1,6002014-07-31 MEDIUM 5.0 CVE-2014-0193 WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remot… Netty Patch available Fix from $1,6002014-05-06