Search for packages
| purl | pkg:maven/io.netty/netty-codec-http@4.2.13.Final |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-31ny-wxsb-c7gg | netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression |
CVE-2026-42587
GHSA-f6hv-jmp6-3vwv |
| VCID-7c2r-a8z2-87en | netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection |
CVE-2026-41417
GHSA-v8h7-rr48-vmmv |
| VCID-8e9f-e1k3-f7ab | netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing |
CVE-2026-42585
GHSA-38f8-5428-x5cv |
| VCID-efpd-xda2-2khy | netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion |
CVE-2026-42584
GHSA-57rv-r2g8-2cj3 |
| VCID-nf3c-b2gw-87b3 | netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers |
CVE-2026-42581
GHSA-xxqh-mfjm-7mv9 |
| VCID-uxn5-ftbb-5fge | netty: Netty: Request smuggling via chunk size parser integer overflow |
CVE-2026-42580
GHSA-m4cv-j2px-7723 |