Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jboss.netty/netty@4.0.0
purl pkg:maven/org.jboss.netty/netty@4.0.0
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (7)

Advisory Summary Aliases
CVE-2019-20445
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied … GHSA-p2v9-g2qv-p635
CVE-2021-21409
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Netty is an open-source, asynchronous event-driven network application framework for rapid development … GHSA-f256-j965-7f32
CVE-2021-37137
Uncontrolled Resource Consumption The Snappy frame decoder function does not restrict the chunk length which may lead to excessive memory … GHSA-9vjp-v76f-g363
CVE-2021-43797
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Netty is an asynchronous event-driven network application framework for rapid development of … GHSA-wx5j-54mm-rqqq
CVE-2021-21290
Creation of Temporary File in Directory with Insecure Permissions Netty is an open-source, asynchronous event-driven network application framework for rapid … GHSA-5mcr-gq6c-3hq2
CVE-2021-37136
Uncontrolled Resource Consumption The Bzip2 decompression decoder function does not allow setting size restrictions on the decompressed output data (which … GHSA-grg4-wf29-r9vv
CVE-2021-21295
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Netty is an open-source, asynchronous event-driven network application framework for rapid development … GHSA-wm47-8v5p-wjpj