Search for packages
| purl | pkg:maven/io.netty/netty-handler@4.0.0 |
| Tags | Ghost |
| Next non-vulnerable version | 4.1.137.Final |
| Latest non-vulnerable version | 4.2.17.Final |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-p2v9-g2qv-p635
Aliases: CVE-2019-20445 |
HTTP Request Smuggling in Netty HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second … | There are no reported fixed by versions. |