Search for packages
Package details: pkg:maven/io.netty/netty@3.9.8.Final
purl pkg:maven/io.netty/netty@3.9.8.Final
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-fm8k-swyd-3fbc
Aliases:
CVE-2019-20444
GHSA-cqqj-4p63-rrmm
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
4.0.0
Affected by 0 other vulnerabilities.
VCID-sf1p-fp2z-bkb6
Aliases:
CVE-2019-20445
GHSA-p2v9-g2qv-p635
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
4.0.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-es3s-xjbh-wbas Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters. CVE-2015-2156
GHSA-xfv3-rrfm-f2rv

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T17:42:08.715454+00:00 GitLab Importer Fixing VCID-es3s-xjbh-wbas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml 37.0.0
2025-07-03T17:38:55.797324+00:00 GitLab Importer Affected by VCID-fm8k-swyd-3fbc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20444.yml 37.0.0
2025-07-03T17:38:55.237782+00:00 GitLab Importer Affected by VCID-sf1p-fp2z-bkb6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml 37.0.0
2025-07-03T13:55:19.815610+00:00 GitLab Importer Fixing VCID-es3s-xjbh-wbas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml 36.1.3
2025-07-01T14:30:18.542969+00:00 GHSA Importer Fixing VCID-es3s-xjbh-wbas https://github.com/advisories/GHSA-xfv3-rrfm-f2rv 36.1.3
2025-07-01T12:17:27.909637+00:00 GithubOSV Importer Fixing VCID-es3s-xjbh-wbas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/06/GHSA-xfv3-rrfm-f2rv/GHSA-xfv3-rrfm-f2rv.json 36.1.3