Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec-http2@4.1.137.Final
purl pkg:maven/io.netty/netty-codec-http2@4.1.137.Final
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2026-93569
Aliases:
GHSA-cg2g-fxr4-mg8m
Inconsistent Interpretation of HTTP Requests A flaw was found in Netty. A remote unauthenticated attacker can exploit a vulnerability in … There are no reported fixed by versions.
CVE-2026-93568
Aliases:
GHSA-w6j8-x45j-w75f
Improper Input Validation A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted … There are no reported fixed by versions.
CVE-2026-93567
Aliases:
GHSA-45h4-vhwh-fmhg
Improper Input Validation A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component … There are no reported fixed by versions.
This package is not known to fix any advisories.