Skip to content
Io.netty Netty-codec-http vulnerabilities
-
netty, io.netty netty-codec-http3 +1 more
Netty: HTTP/3 QPACK literal unbounded allocation
CVE-2026-42582
Fix available
7.5 High
-
netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 more
Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS
CVE-2026-42587
Fix available
7.5 High
-
netty, io.netty netty-codec-http +1 more
Netty: HTTP Request Smuggling due to malformed Transfer-Encoding
CVE-2026-42585
Fix available
6.5 Medium
-
netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 more
Netty: HttpClientCodec response desynchronization
CVE-2026-42584
Fix available
7.3 High
-
netty, io.netty netty-codec-http +1 more
Netty: HTTP Request Smuggling due to incorrect chunk size parsing
CVE-2026-42580
Fix available
6.5 Medium