Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-5dd1-2d3f-55c1
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-5dd1-2d3f-55c1.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-5dd1-2d3f-55c1
Upstream
CVE-2026-100666
GHSA-jq5g-c66v-g3r2
Published
2026-11-01T08:55:31Z
Modified
2026-11-05T15:45:03Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-100666
https://github.com/netty/netty/security/advisories/GHSA-2g6j-r8q9-5hr8
https://nvd.nist.gov/vuln/detail/CVE-2026-100666
https://www.vulncheck.com/advisories/netty-4.2.0-through-4.2.17-response-desynchronization-via-httpservercodec
https://github.com/advisories/GHSA-jq5g-c66v-g3r2
Affected packages
Echo:Maven
/
io.netty:netty-codec-http
Package
Name
io.netty:netty-codec-http
Purl
pkg:maven/io.netty/netty-codec-http
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
4.1.74.Final+echo.7
Database specific
source
"https://advisory.echohq.com/osv/ECHO-5dd1-2d3f-55c1.json"
ECHO-5dd1-2d3f-55c1 - OSV