io.netty:netty-codec-http vulnerabilities (Root)
12 vulnerabilities.
-
io.netty:netty-codec-httpRoot Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion 8.7 High -
io.netty:netty-codec-httpRoot Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation 7.5 High -
io.netty:netty-codec-httpRoot Netty SPDY SETTINGS frame count materializes unbounded settings map 7.5 High -
io.netty:netty-codec-httpRoot Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted 5.3 Medium -
io.netty:netty-codec-httpRoot Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS 7.5 High -
io.netty:netty-codec-httpRoot Netty: HTTP Request Smuggling due to malformed Transfer-Encoding 6.5 Medium -
io.netty:netty-codec-httpRoot Netty: HttpClientCodec response desynchronization 7.3 High -
io.netty:netty-codec-httpRoot Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization 5.8 Medium -
io.netty:netty-codec-httpRoot Netty: HTTP Request Smuggling due to incorrect chunk size parsing 6.5 Medium -
io.netty:netty-codec-httpRoot Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri() 5.3 Medium -
io.netty:netty-codec-httpRoot Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 7.5 High -
io.netty:netty-codec-httpRoot Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder 6.5 Medium