Search for packages
| purl | pkg:maven/io.netty/netty@3.9.1.1.Final |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-es3s-xjbh-wbas
Aliases: CVE-2015-2156 GHSA-xfv3-rrfm-f2rv |
Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and obtain sensitive information by leveraging improper validation of cookie name and value characters. |
Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-fm8k-swyd-3fbc
Aliases: CVE-2019-20444 GHSA-cqqj-4p63-rrmm |
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold." |
Affected by 0 other vulnerabilities. |
|
VCID-sf1p-fp2z-bkb6
Aliases: CVE-2019-20445 GHSA-p2v9-g2qv-p635 |
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-84sr-xmad-2kfv |
CVE-2014-3488
GHSA-9959-6p3m-wxpc |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-03T17:42:08.703889+00:00 | GitLab Importer | Affected by | VCID-es3s-xjbh-wbas | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2015-2156.yml | 37.0.0 |
| 2025-07-03T17:38:55.785836+00:00 | GitLab Importer | Affected by | VCID-fm8k-swyd-3fbc | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20444.yml | 37.0.0 |
| 2025-07-03T17:38:55.223091+00:00 | GitLab Importer | Affected by | VCID-sf1p-fp2z-bkb6 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml | 37.0.0 |
| 2025-07-03T17:12:51.975007+00:00 | GitLab Importer | Fixing | VCID-84sr-xmad-2kfv | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2014-3488.yml | 37.0.0 |