Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-54251
  • github.com/netty/netty-incubator-codec-ohttp
 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service 15 Sep
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-48480
  • github.com/netty/netty-incubator-codec-ohttp
 netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation 04 Jun
  • Fix available
  • Severity - 6.6 (Medium)
CVE-2026-48040
  • github.com/netty/netty-incubator-codec-ohttp
 netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access 04 Jun
  • Fix available
  • Severity - 6.8 (Medium)
CVE-2026-41207
  • github.com/netty/netty-incubator-codec-ohttp
 netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures 04 Jun
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2024-40642
  • github.com/netty/netty-incubator-codec-ohttp
 Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp 18 Jul 2024
  • Fix available
  • Severity - 8.1 (High)
CVE-2024-36121
  • github.com/netty/netty-incubator-codec-ohttp
 netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces 04 Jun 2024
  • Fix available
  • Severity - 5.9 (Medium)