Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-codec@4.1.135.Final
purl pkg:maven/io.netty/netty-codec@4.1.135.Final
Next non-vulnerable version 4.1.136.Final
Latest non-vulnerable version 4.1.136.Final
Risk score 3.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-558v-64gr-wgg4
Aliases:
CVE-2026-59901
Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang The `Bzip2Decoder` handler in Netty's compression codec …
4.1.136.Final
Not vulnerable
CVE-2026-59901
Aliases:
GHSA-558v-64gr-wgg4
Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang The `Bzip2Decoder` handler in Netty's compression codec … There are no reported fixed by versions.
This package is not known to fix any advisories.