Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec-http2@4.2.13
purl pkg:maven/io.netty/netty-codec-http2@4.2.13
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS `HttpContentDecompressor` accepts a `maxAllocation` parameter to … GHSA-f6hv-jmp6-3vwv