io.netty:netty-codec-http vulnerabilities (Maven)
24 vulnerabilities.
-
io.netty:netty-codec-httpMaven Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite 6.5 Medium -
io.netty:netty-codec-httpMaven Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 5.7 Medium -
io.netty:netty-codec-httpMaven Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service 6.9 Medium -
io.netty:netty-codec-httpMaven Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation 6.3 Medium -
io.netty:netty-codec-httpMaven Netty has a Security Control Bypass via CORS Short-Circuit Failure 6.5 Medium -
io.netty:netty-codec-httpMaven Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion 8.7 High -
io.netty:netty-codec-httpMaven Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation 7.5 High -
io.netty:netty-codec-httpMaven Netty SPDY SETTINGS frame count materializes unbounded settings map 7.5 High -
io.netty:netty-codec-httpMaven Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted 5.3 Medium -
io.netty:netty-codec-httpMaven Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS 7.5 High -
io.netty:netty-codec-httpMaven Netty: HTTP Request Smuggling due to malformed Transfer-Encoding 6.5 Medium -
io.netty:netty-codec-httpMaven Netty: HttpClientCodec response desynchronization 7.3 High -
io.netty:netty-codec-httpMaven Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization 5.8 Medium -
io.netty:netty-codec-httpMaven Netty: HTTP Request Smuggling due to incorrect chunk size parsing 6.5 Medium -
io.netty:netty-codec-httpMaven Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri() 5.3 Medium -
io.netty:netty-codec-httpMaven Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 7.5 High -
io.netty:netty-codec-httpMaven Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder 6.5 Medium -
io.netty:netty-codec-httpMaven Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 2.9 Low -
io.netty:netty-codec-httpMaven Netty HttpPostRequestDecoder can OOM 5.3 Medium -
io.netty:netty-codec-httpMaven Netty vulnerable to HTTP Response splitting from assigning header value iterator 6.5 Medium -
io.netty:netty-codec-httpMaven Local Information Disclosure Vulnerability in io.netty:netty-codec-http 5.5 Medium -
io.netty:netty-codec-httpMaven HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling 6.5 Medium -
io.netty:netty-codec-httpMaven Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files 6.2 Medium -
io.netty:netty-codec-httpMaven HTTP Request Smuggling in Netty 9.1 Critical