Search for packages
Package details: pkg:maven/io.netty/netty@4.0.0.Alpha2
purl pkg:maven/io.netty/netty@4.0.0.Alpha2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-fm8k-swyd-3fbc
Aliases:
CVE-2019-20444
GHSA-cqqj-4p63-rrmm
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."
4.0.0
Affected by 0 other vulnerabilities.
VCID-sf1p-fp2z-bkb6
Aliases:
CVE-2019-20445
GHSA-p2v9-g2qv-p635
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header.
4.0.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-03T17:38:55.813726+00:00 GitLab Importer Affected by VCID-fm8k-swyd-3fbc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20444.yml 37.0.0
2025-07-03T17:38:55.258737+00:00 GitLab Importer Affected by VCID-sf1p-fp2z-bkb6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/io.netty/netty/CVE-2019-20445.yml 37.0.0