Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty@3.9.1.Final
purl pkg:maven/io.netty/netty@3.9.1.Final
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-3mgs-vrus-q3ag
Aliases:
CVE-2019-20445
GHSA-p2v9-g2qv-p635
HTTP Request Smuggling in Netty HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
4.0.0
Affected by 0 other vulnerabilities.
VCID-81nf-zd3k-mud7
Aliases:
CVE-2015-2156
GHSA-xfv3-rrfm-f2rv
Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters.
3.9.8.Final
Affected by 1 other vulnerability.
3.10.3.Final
Affected by 1 other vulnerability.
VCID-dtrw-kqd2-duce
Aliases:
CVE-2014-3488
GHSA-9959-6p3m-wxpc
The SslHandler in Netty before 3.9.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted SSLv2Hello message.
3.9.1.1.Final
Affected by 2 other vulnerabilities.
3.9.2.Final
Affected by 2 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-2khv-6pu7-akga WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and 4.0.x before 4.0.19 allows remote attackers to cause a denial of service (memory consumption) via a TextWebSocketFrame followed by a long stream of ContinuationWebSocketFrames. CVE-2014-0193
GHSA-7vpq-g998-qpv7

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:47:56.574980+00:00 GitLab Importer Fixing VCID-2khv-6pu7-akga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-0193.yml 38.4.0
2026-04-16T21:05:00.310717+00:00 GitLab Importer Affected by VCID-81nf-zd3k-mud7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml 38.4.0
2026-04-16T21:00:50.764812+00:00 GitLab Importer Affected by VCID-3mgs-vrus-q3ag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml 38.4.0
2026-04-16T20:31:46.899038+00:00 GitLab Importer Affected by VCID-dtrw-kqd2-duce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-3488.yml 38.4.0
2026-04-11T23:03:48.588432+00:00 GitLab Importer Fixing VCID-2khv-6pu7-akga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-0193.yml 38.3.0
2026-04-11T22:16:27.499932+00:00 GitLab Importer Affected by VCID-81nf-zd3k-mud7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml 38.3.0
2026-04-11T22:12:06.326495+00:00 GitLab Importer Affected by VCID-3mgs-vrus-q3ag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml 38.3.0
2026-04-11T21:42:09.247802+00:00 GitLab Importer Affected by VCID-dtrw-kqd2-duce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-3488.yml 38.3.0
2026-04-04T14:30:05.674073+00:00 GHSA Importer Fixing VCID-2khv-6pu7-akga https://github.com/advisories/GHSA-7vpq-g998-qpv7 38.1.0
2026-04-02T23:12:10.863847+00:00 GitLab Importer Fixing VCID-2khv-6pu7-akga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-0193.yml 38.1.0
2026-04-02T22:28:37.421942+00:00 GitLab Importer Affected by VCID-81nf-zd3k-mud7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml 38.1.0
2026-04-02T22:24:34.287253+00:00 GitLab Importer Affected by VCID-3mgs-vrus-q3ag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml 38.1.0
2026-04-02T21:56:19.408991+00:00 GitLab Importer Affected by VCID-dtrw-kqd2-duce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-3488.yml 38.1.0
2026-04-01T17:32:06.048149+00:00 GitLab Importer Fixing VCID-2khv-6pu7-akga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-0193.yml 38.0.0
2026-04-01T16:46:34.743846+00:00 GitLab Importer Affected by VCID-81nf-zd3k-mud7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml 38.0.0
2026-04-01T16:42:25.579705+00:00 GitLab Importer Affected by VCID-3mgs-vrus-q3ag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml 38.0.0
2026-04-01T13:10:55.096368+00:00 GithubOSV Importer Fixing VCID-2khv-6pu7-akga https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-7vpq-g998-qpv7/GHSA-7vpq-g998-qpv7.json 38.0.0
2026-04-01T12:46:53.754424+00:00 GitLab Importer Affected by VCID-dtrw-kqd2-duce https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-3488.yml 38.0.0