Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-20445

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-p2v9-g2qv-p635

HTTP Request Smuggling in Netty HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gitlab/maven/io.netty/netty-all/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) This advisory has been marked as a false positive.

gitlab/maven/io.netty/netty-codec-http/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) `HttpObjectDecoder.java` in Netty allows a Content-Length header to be accompanied by a second `Content-Length` header, or by a `Transfer-Encoding` header.

gitlab/maven/io.netty/netty/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gitlab/maven/io.netty/netty-handler/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.

gitlab/maven/org.jboss.netty/netty/CVE-2019-20445

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.