Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/io.netty/netty@4.0.0.Alpha5
purl pkg:maven/io.netty/netty@4.0.0.Alpha5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-7vpq-g998-qpv7
Aliases:
CVE-2014-0193
Netty denial of service vulnerability `WebSocket08FrameDecoder` in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, … There are no reported fixed by versions.
CVE-2021-21409
Aliases:
GHSA-f256-j965-7f32
GHSA-wm47-8v5p-wjpj
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty is an open-source, asynchronous event-driven network application framework for rapid development … There are no reported fixed by versions.
CVE-2019-20445
Aliases:
GHSA-p2v9-g2qv-p635
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied … There are no reported fixed by versions.
GHSA-p979-4mfw-53vg
Aliases:
CVE-2019-16869
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … There are no reported fixed by versions.
This package is not known to fix any advisories.