Search for packages
| purl | pkg:maven/io.netty/netty-codec-compression@4.2.0.Alpha1 |
| Tags | Ghost |
| Next non-vulnerable version | 4.2.16.Final |
| Latest non-vulnerable version | 4.2.16.Final |
| Risk score | 3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-3p8m-j85q-pgmj
Aliases: CVE-2025-58057 |
Netty's decoders vulnerable to DoS via zip bomb style attack ### Summary With specially crafted input, `BrotliDecoder` and some other … |
Vulnerable |