Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-8c42-7qj2-3j46
  • Maven/io.netty:netty-codec-http
 Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite 17 Aug
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-gcjf-9mgh-3p7g
  • Maven/io.netty:netty-codec-http
 Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 22 Jul
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-q4f6-jm68-57ww
  • Maven/io.netty:netty-codec-http
 Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service 22 Jul
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-4mp9-239f-g9hg
  • Maven/io.netty:netty-codec-http
 Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation 22 Jul
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-6cqp-g7gg-8hr5
  • Maven/io.netty:netty-codec-http
 Netty: Security Control Bypass via CORS Short-Circuit Failure 22 Jul
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-jppx-w49h-x2qq
  • Maven/io.netty:netty-codec-http
 Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion 22 Jul
  • Fix available
  • Severity - 8.7 (High)
GHSA-mvh2-crg5-v77c
  • Maven/io.netty:netty-codec-http
 Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation 22 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-6jqx-86gh-f27w
  • Maven/io.netty:netty-codec-http
 Netty SPDY SETTINGS frame count materializes unbounded settings map 22 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-hvcg-qmg6-jm4c
  • Maven/io.netty:netty-codec-http
 Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted 15 Jun
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-f6hv-jmp6-3vwv
  • Maven/io.netty:netty-codec-http
  • Maven/io.netty:netty-codec-http2
 Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS 07 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-38f8-5428-x5cv
  • Maven/io.netty:netty-codec-http
 Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding 07 May
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-57rv-r2g8-2cj3
  • Maven/io.netty:netty-codec-http
 Netty has HttpClientCodec response desynchronization 07 May
  • Fix available
  • Severity - 7.3 (High)
GHSA-xxqh-mfjm-7mv9
  • Maven/io.netty:netty-codec-http
 Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization 07 May
  • Fix available
  • Severity - 5.8 (Medium)
GHSA-m4cv-j2px-7723
  • Maven/io.netty:netty-codec-http
 Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing 07 May
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-v8h7-rr48-vmmv
  • Maven/io.netty:netty-codec-http
 Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection 05 May
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-pwqr-wmgm-9rr8
  • Maven/io.netty:netty-codec-http
 Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 26 Mar
  • Fix available
  • Severity - 7.5 (High)
Load more...