Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec-http@4.1.126.Final
purl pkg:maven/io.netty/netty-codec-http@4.1.126.Final
Next non-vulnerable version 4.1.133.Final
Latest non-vulnerable version 4.2.13.Final
Risk 4.0
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-31ny-wxsb-c7gg
Aliases:
CVE-2026-42587
GHSA-f6hv-jmp6-3vwv
netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression
4.1.133
Affected by 0 other vulnerabilities.
4.1.133.Final
Affected by 0 other vulnerabilities.
4.2.13.Final
Affected by 0 other vulnerabilities.
4.2.13
Affected by 0 other vulnerabilities.
VCID-7c2r-a8z2-87en
Aliases:
CVE-2026-41417
GHSA-v8h7-rr48-vmmv
netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection
4.1.133
Affected by 0 other vulnerabilities.
4.1.133.Final
Affected by 0 other vulnerabilities.
4.2.13.Final
Affected by 0 other vulnerabilities.
4.2.13
Affected by 0 other vulnerabilities.
VCID-8e9f-e1k3-f7ab
Aliases:
CVE-2026-42585
GHSA-38f8-5428-x5cv
netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing
4.1.133
Affected by 0 other vulnerabilities.
4.1.133.Final
Affected by 0 other vulnerabilities.
4.2.13.Final
Affected by 0 other vulnerabilities.
4.2.13
Affected by 0 other vulnerabilities.
VCID-8n29-ssr1-6ydr
Aliases:
CVE-2026-33870
GHSA-pwqr-wmgm-9rr8
io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values
4.1.132.Final
Affected by 6 other vulnerabilities.
4.2.10.Final
Affected by 6 other vulnerabilities.
VCID-efpd-xda2-2khy
Aliases:
CVE-2026-42584
GHSA-57rv-r2g8-2cj3
netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion
4.1.133
Affected by 0 other vulnerabilities.
4.1.133.Final
Affected by 0 other vulnerabilities.
4.2.13.Final
Affected by 0 other vulnerabilities.
4.2.13
Affected by 0 other vulnerabilities.
VCID-nf3c-b2gw-87b3
Aliases:
CVE-2026-42581
GHSA-xxqh-mfjm-7mv9
netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers
4.1.133
Affected by 0 other vulnerabilities.
4.1.133.Final
Affected by 0 other vulnerabilities.
4.2.13.Final
Affected by 0 other vulnerabilities.
4.2.13
Affected by 0 other vulnerabilities.
VCID-uxn5-ftbb-5fge
Aliases:
CVE-2026-42580
GHSA-m4cv-j2px-7723
netty: Netty: Request smuggling via chunk size parser integer overflow
4.1.133
Affected by 0 other vulnerabilities.
4.1.133.Final
Affected by 0 other vulnerabilities.
4.2.13.Final
Affected by 0 other vulnerabilities.
4.2.13
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-07T10:40:49.422787+00:00 GitLab Importer Affected by VCID-uxn5-ftbb-5fge https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-42580.yml 38.6.0
2026-06-07T10:40:47.026838+00:00 GitLab Importer Affected by VCID-nf3c-b2gw-87b3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-42581.yml 38.6.0
2026-06-07T10:40:44.855256+00:00 GitLab Importer Affected by VCID-efpd-xda2-2khy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-42584.yml 38.6.0
2026-06-07T10:40:33.405636+00:00 GitLab Importer Affected by VCID-8e9f-e1k3-f7ab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-42585.yml 38.6.0
2026-06-07T10:40:31.160138+00:00 GitLab Importer Affected by VCID-31ny-wxsb-c7gg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-42587.yml 38.6.0
2026-06-06T08:26:54.185836+00:00 GitLab Importer Affected by VCID-7c2r-a8z2-87en https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-41417.yml 38.6.0
2026-06-06T07:36:19.929615+00:00 GitLab Importer Affected by VCID-8n29-ssr1-6ydr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-codec-http/CVE-2026-33870.yml 38.6.0