Io.netty vulnerabilities

Products

• Netty-codec-http 4

Newest

• netty, io.netty netty-codec-http3 +1 more Netty: HTTP/3 QPACK literal unbounded allocation CVE-2026-42582 Fix available 7.5 HighMay 7, 2026
• netty, io.netty netty-codec-mqtt, red hat amq broker 7.13.6 +8 more +10 more Netty: Resource exhaustion in MqttDecoder CVE-2026-44248 Fix available 5.3 MediumOctober 10, 2023
• netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 more Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS CVE-2026-42587 Fix available 7.5 HighOctober 10, 2023
• netty, io.netty netty-codec-redis +1 more Netty: CRLF Injection in Netty Redis Codec Encoder CVE-2026-42586 Fix available 6.8 MediumOctober 10, 2023
• netty, io.netty netty-codec-http +1 more Netty: HTTP Request Smuggling due to malformed Transfer-Encoding CVE-2026-42585 Fix available 6.5 MediumOctober 10, 2023
• netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 more Netty: HttpClientCodec response desynchronization CVE-2026-42584 Fix available 7.3 HighOctober 10, 2023
• netty, io.netty netty-codec, netty-codec-compression +2 more Netty: Lz4FrameDecoder resource exhaustion CVE-2026-42583 Fix available 7.5 HighOctober 10, 2023
• netty, io.netty netty-codec-http +1 more Netty: HTTP Request Smuggling due to incorrect chunk size parsing CVE-2026-42580 Fix available 6.5 MediumOctober 10, 2023