Search for packages
| purl | pkg:maven/io.netty/netty-all@4.1.0.CR2 |
| Next non-vulnerable version | 4.1.94.Final |
| Latest non-vulnerable version | 4.1.94.Final |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-21409
Aliases: GHSA-f256-j965-7f32 GHSA-wm47-8v5p-wjpj |
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty is an open-source, asynchronous event-driven network application framework for rapid development … |
Vulnerable |
|
CVE-2021-37136
Aliases: GHSA-grg4-wf29-r9vv |
Uncontrolled Resource Consumption The Bzip2 decompression decoder function does not allow setting size restrictions on the decompressed output data (which … | There are no reported fixed by versions. |
|
CVE-2022-41881
Aliases: GHSA-fx2c-96vj-985v |
Uncontrolled Recursion Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be … | There are no reported fixed by versions. |
|
GHSA-p979-4mfw-53vg
Aliases: CVE-2019-16869 |
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … |
Vulnerable Vulnerable |
|
CVE-2019-16869
Aliases: GHSA-p979-4mfw-53vg |
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … | There are no reported fixed by versions. |
|
CVE-2023-34462
Aliases: GHSA-6mjq-h674-j845 |
Allocation of Resources Without Limits or Throttling Netty is an asynchronous event-driven network application framework for rapid development of maintainable … |
Not vulnerable Not vulnerable |
|
CVE-2026-93565
Aliases: GHSA-h75q-xqrh-59rf |
Incorrect Behavior Order: Validate Before Canonicalize A flaw was found in Netty `RtspDecoder`. The `RtspMethods.valueOf()` function incorrectly strips trailing control … | There are no reported fixed by versions. |
|
CVE-2026-93569
Aliases: GHSA-cg2g-fxr4-mg8m |
Inconsistent Interpretation of HTTP Requests A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in … | There are no reported fixed by versions. |
|
CVE-2026-93567
Aliases: GHSA-45h4-vhwh-fmhg |
Improper Input Validation A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component … | There are no reported fixed by versions. |
|
CVE-2026-100666
Aliases: GHSA-2g6j-r8q9-5hr8 |
Inconsistent Interpretation of HTTP Requests Netty's `HttpServerCodec` pairs each outbound response with an inbound request by calling `pollMethod()` once per … | There are no reported fixed by versions. |