Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Io.netty
Netty-codec-http2
Io.netty Netty-codec-http2 vulnerabilities
netty
,
io.netty
netty-codec-http
,
netty-codec-http2
+37 more
+39 more
Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS
CVE-2026-42587
Fix available
7.5
High
October 10, 2023
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open