Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec-http2@4.0.0
purl pkg:maven/io.netty/netty-codec-http2@4.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-f256-j965-7f32
Aliases:
CVE-2021-21409
Possible request smuggling in HTTP/2 due missing validation of content-length ### Impact The content-length header is not correctly validated if …
4.1.61.Final
Vulnerable
4.1.61.Final
Vulnerable
GHSA-wm47-8v5p-wjpj
Aliases:
CVE-2021-21295
Possible request smuggling in HTTP/2 due missing validation ### Impact If a Content-Length header is present in the original HTTP/2 …
4.1.60.Final
Vulnerable
4.1.60.Final
Vulnerable
This package is not known to fix any advisories.