Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-p2v9-g2qv-p635

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-p2v9-g2qv-p635

HTTP Request Smuggling in Netty HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gitlab/maven/io.netty/netty/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gitlab/maven/io.netty/netty-handler/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gitlab/maven/org.jboss.netty/netty/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.