Search for packages
| purl | pkg:maven/org.jboss.netty/netty@3.1.2.GA |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 3.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2019-20445
Aliases: GHSA-p2v9-g2qv-p635 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied … | There are no reported fixed by versions. |
|
GHSA-p979-4mfw-53vg
Aliases: CVE-2019-16869 |
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … | There are no reported fixed by versions. |
|
GHSA-xfv3-rrfm-f2rv
Aliases: CVE-2015-2156 |
Information Exposure in Netty Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework … | There are no reported fixed by versions. |
|
CVE-2021-21409
Aliases: GHSA-f256-j965-7f32 |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Netty is an open-source, asynchronous event-driven network application framework for rapid development … | There are no reported fixed by versions. |
|
CVE-2021-37137
Aliases: GHSA-9vjp-v76f-g363 |
Uncontrolled Resource Consumption The Snappy frame decoder function does not restrict the chunk length which may lead to excessive memory … | There are no reported fixed by versions. |
|
CVE-2021-43797
Aliases: GHSA-wx5j-54mm-rqqq |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Netty is an asynchronous event-driven network application framework for rapid development of … | There are no reported fixed by versions. |
|
CVE-2019-16869
Aliases: GHSA-p979-4mfw-53vg |
HTTP Request Smuggling in Netty Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding … | There are no reported fixed by versions. |
|
CVE-2021-21290
Aliases: GHSA-5mcr-gq6c-3hq2 |
Creation of Temporary File in Directory with Insecure Permissions Netty is an open-source, asynchronous event-driven network application framework for rapid … | There are no reported fixed by versions. |
|
CVE-2021-37136
Aliases: GHSA-grg4-wf29-r9vv |
Uncontrolled Resource Consumption The Bzip2 decompression decoder function does not allow setting size restrictions on the decompressed output data (which … | There are no reported fixed by versions. |
|
CVE-2021-21295
Aliases: GHSA-wm47-8v5p-wjpj |
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Netty is an open-source, asynchronous event-driven network application framework for rapid development … | There are no reported fixed by versions. |