Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-handler@4.1.135
purl pkg:maven/io.netty/netty-handler@4.1.135
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2026-45416
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes SslClientHelloHandler.decode() reads the 24-bit TLS handshake length and, … GHSA-x4gw-5cx5-pgmh
CVE-2026-44249
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking An attacker can bypass IPv6 subnet rules due to … GHSA-3qp7-7mw8-wx86
CVE-2026-50010
Netty: Wrapping plain trust manager silently disables hostname verification SimpleTrustManagerFactory.engineGetTrustManagers() and related paths wrap any user-supplied plain X509TrustManager in X509TrustManagerWrapper, … GHSA-c653-97m9-rcg9