VulnerableCode Package Details - pkg:maven/io.netty/netty-codec@4.0.0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:maven/io.netty/netty-codec@4.0.0

Essentials
History (1)

purl	pkg:maven/io.netty/netty-codec@4.0.0
Tags	Ghost

Next non-vulnerable version	4.1.125.Final
Latest non-vulnerable version	4.1.125.Final
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-8p4t-8f51-h3dc Aliases: CVE-2021-37137 GHSA-9vjp-v76f-g363	Uncontrolled Resource Consumption The Snappy frame decoder function does not restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.	4.1.68 Affected by 0 other vulnerabilities. 4.1.68.Final Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-8p4t-8f51-h3dc
Aliases:
CVE-2021-37137
GHSA-9vjp-v76f-g363

Uncontrolled Resource Consumption The Snappy frame decoder function does not restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk.

4.1.68
Affected by 0 other vulnerabilities.

4.1.68.Final
Affected by 1 other vulnerability.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-02T16:58:12.112493+00:00	GHSA Importer	Affected by	VCID-8p4t-8f51-h3dc	https://github.com/advisories/GHSA-9vjp-v76f-g363	38.1.0