Search for packages
| purl | pkg:maven/io.netty/netty-handler@4.1.44 |
| Tags | Ghost |
| Next non-vulnerable version | 4.1.118.Final |
| Latest non-vulnerable version | 4.1.118.Final |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1nbf-66f8-x7h2
Aliases: CVE-2020-7238 GHSA-ff2w-cq2g-wv5f |
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869. |
Affected by 3 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-03T13:55:02.601159+00:00 | GitLab Importer | Fixing | VCID-fm8k-swyd-3fbc | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-handler/CVE-2019-20444.yml | 36.1.3 |
| 2025-07-03T13:55:02.387155+00:00 | GitLab Importer | Affected by | VCID-1nbf-66f8-x7h2 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty-handler/CVE-2020-7238.yml | 36.1.3 |
| 2025-07-01T14:30:05.784994+00:00 | GHSA Importer | Affected by | VCID-1nbf-66f8-x7h2 | https://github.com/advisories/GHSA-ff2w-cq2g-wv5f | 36.1.3 |