Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty-handler@4.1.44
purl pkg:maven/io.netty/netty-handler@4.1.44
Tags Ghost
Next non-vulnerable version 4.1.137.Final
Latest non-vulnerable version 4.2.17.Final
Risk score 3.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-ff2w-cq2g-wv5f
Aliases:
CVE-2020-7238
HTTP Request Smuggling in Netty Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2019-20444
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a … GHSA-cqqj-4p63-rrmm