Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec-http2@4.1.136
purl pkg:maven/io.netty/netty-codec-http2@4.1.136
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2026-59900
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` … GHSA-c69g-56f8-xwqj
CVE-2026-56819
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS) … GHSA-93wv-jw9v-4972