Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec-compression@4.2.0.RC4
purl pkg:maven/io.netty/netty-codec-compression@4.2.0.RC4
Next non-vulnerable version 4.2.16.Final
Latest non-vulnerable version 4.2.16.Final
Risk score 3.4
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-3p8m-j85q-pgmj
Aliases:
CVE-2025-58057
Netty's decoders vulnerable to DoS via zip bomb style attack ### Summary With specially crafted input, `BrotliDecoder` and some other …
4.2.5.Final
Vulnerable
GHSA-mj4r-2hfc-f8p6
Aliases:
CVE-2026-42583
Netty Lz4FrameDecoder is vulnerable to resource exhaustion ### Summary Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB …
4.2.13.Final
Vulnerable
CVE-2026-42583
Aliases:
GHSA-mj4r-2hfc-f8p6
Netty Lz4FrameDecoder is vulnerable to resource exhaustion Lz4FrameDecoder allocates a ByteBuf of size `decompressedLength` (up to 32 MB per block) … There are no reported fixed by versions.
This package is not known to fix any advisories.