VulnerableCode Package Details - pkg:maven/io.netty/netty@3.3.0.Final

Search for packages

Vulnerability	Summary	Fixed by
VCID-3mgs-vrus-q3ag Aliases: CVE-2019-20445 GHSA-p2v9-g2qv-p635	HTTP Request Smuggling in Netty HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.	4.0.0 Affected by 0 other vulnerabilities.
VCID-81nf-zd3k-mud7 Aliases: CVE-2015-2156 GHSA-xfv3-rrfm-f2rv	Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.	3.9.8.Final Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 3.10.3.Final Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-3mgs-vrus-q3ag
Aliases:
CVE-2019-20445
GHSA-p2v9-g2qv-p635

HTTP Request Smuggling in Netty HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

4.0.0
Affected by 0 other vulnerabilities.

VCID-81nf-zd3k-mud7
Aliases:
CVE-2015-2156
GHSA-xfv3-rrfm-f2rv

Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.

3.9.8.Final
Affected by 1 other vulnerability.

3.10.3.Final
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-16T21:05:00.163581+00:00	GitLab Importer	Affected by	VCID-81nf-zd3k-mud7	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml	38.4.0
2026-04-16T21:00:50.615951+00:00	GitLab Importer	Affected by	VCID-3mgs-vrus-q3ag	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml	38.4.0
2026-04-11T22:16:27.340111+00:00	GitLab Importer	Affected by	VCID-81nf-zd3k-mud7	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml	38.3.0
2026-04-11T22:12:06.164219+00:00	GitLab Importer	Affected by	VCID-3mgs-vrus-q3ag	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml	38.3.0
2026-04-02T22:28:37.271833+00:00	GitLab Importer	Affected by	VCID-81nf-zd3k-mud7	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml	38.1.0
2026-04-02T22:24:34.135892+00:00	GitLab Importer	Affected by	VCID-3mgs-vrus-q3ag	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml	38.1.0
2026-04-01T16:46:34.568279+00:00	GitLab Importer	Affected by	VCID-81nf-zd3k-mud7	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml	38.0.0
2026-04-01T16:42:25.367211+00:00	GitLab Importer	Affected by	VCID-3mgs-vrus-q3ag	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml	38.0.0