Search for packages
| purl | pkg:maven/io.netty/netty@3.6.9.Final |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2021-21409
Aliases: GHSA-f256-j965-7f32 GHSA-wm47-8v5p-wjpj |
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty is an open-source, asynchronous event-driven network application framework for rapid development … | There are no reported fixed by versions. |
|
CVE-2019-20445
Aliases: GHSA-p2v9-g2qv-p635 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied … | There are no reported fixed by versions. |
|
GHSA-p979-4mfw-53vg
Aliases: CVE-2019-16869 |
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … | There are no reported fixed by versions. |
|
GHSA-xfv3-rrfm-f2rv
Aliases: CVE-2015-2156 |
Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework … |
Vulnerable Vulnerable |
|
CVE-2019-16869
Aliases: GHSA-p979-4mfw-53vg |
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-7vpq-g998-qpv7
|
Netty denial of service vulnerability `WebSocket08FrameDecoder` in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, … |
CVE-2014-0193
|