Maven - OSV

GHSA-c4c3-7fpv-j4q5

Maven/io.netty:netty-handler

Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext 08 Sep

Fix available
Severity - 9.1 (Critical)

GHSA-fccg-mwvh-qqg4

Maven/io.netty:netty-handler

Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing 08 Sep

Fix available
Severity - 6.9 (Medium)

GHSA-wc96-39fc-566f

Maven/io.netty:netty-handler-ssl-ocsp

Netty: TOCTOU in OcspServerCertificateValidator 22 Jul

Fix available
Severity - 7.4 (High)

GHSA-g7hg-vrcf-mvmr

Maven/io.netty:netty-handler-ssl-ocsp

Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator 22 Jul

Fix available
Severity - 7.4 (High)

GHSA-272m-gcwp-mpwg

Maven/io.netty:netty-handler-ssl-ocsp

Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks 22 Jul

Fix available
Severity - 7.4 (High)

GHSA-c653-97m9-rcg9

Maven/io.netty:netty-handler

Netty: Wrapping plain trust manager silently disables hostname verification 15 Jun

Fix available
Severity - 7.5 (High)

GHSA-x4gw-5cx5-pgmh

Maven/io.netty:netty-handler

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes 08 Jun

Fix available
Severity - 7.5 (High)

GHSA-3qp7-7mw8-wx86

Maven/io.netty:netty-handler

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking 08 Jun

Fix available
Severity - 8.1 (High)

GHSA-45q3-82m4-75jr

Maven/io.netty:netty-handler-proxy

Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735) 07 May

Fix available
Severity - 2.9 (Low)

GHSA-4g8c-wm8x-jfhw

Maven/io.netty:netty-handler

SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 10 Feb 2025

Fix available
Severity - 7.5 (High)

GHSA-6mjq-h674-j845

Maven/io.netty:netty-handler

netty-handler SniHandler 16MB allocation 20 Jun 2023

Fix available
Severity - 6.5 (Medium)

GHSA-rv63-gqm8-9w8q

Maven/io.netty:netty-handler

Loop with Unreachable Exit Condition in Netty 13 May 2022

Fix available
Severity - 7.5 (High)

GHSA-9959-6p3m-wxpc

Maven/io.netty:netty-handler

Denial of service in Netty 30 Jun 2020

Fix available

GHSA-mm9x-g8pc-w292

Maven/io.netty:netty-handler

Denial of Service in Netty 15 Jun 2020

Fix available
Severity - 7.5 (High)

GHSA-ff2w-cq2g-wv5f

Maven/io.netty:netty-handler

HTTP Request Smuggling in Netty 21 Feb 2020

Fix available
Severity - 7.5 (High)

GHSA-p2v9-g2qv-p635

Maven/io.netty:netty
Maven/io.netty:netty-handler
Maven/org.jboss.netty:netty

HTTP Request Smuggling in Netty 21 Feb 2020

Fix available

Vulnerabilities