Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
ECHO-9a76-72a2-0514
See a problem?
Import Source
https://advisory.echohq.com/osv/ECHO-9a76-72a2-0514.json
JSON Data
https://api.osv.dev/v1/vulns/ECHO-9a76-72a2-0514
Upstream
CVE-2026-100656
GHSA-g3wj-wqf3-65v6
Published
2026-11-01T08:55:31Z
Modified
2026-11-01T09:15:03Z
Summary
[none]
Details
References
https://advisory.echohq.com/cve/CVE-2026-100656
https://github.com/netty/netty/security/advisories/GHSA-pvjx-v7vp-62vq
https://nvd.nist.gov/vuln/detail/CVE-2026-100656
https://www.vulncheck.com/advisories/netty-httpservercodec-unbounded-queue-growth-via-http-1.1-pipelining
https://github.com/advisories/GHSA-g3wj-wqf3-65v6
Affected packages
Echo:Maven
/
io.netty:netty-codec-http
Package
Name
io.netty:netty-codec-http
Purl
pkg:maven/io.netty/netty-codec-http
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
4.1.132.Final+echo.1
Database specific
source
"https://advisory.echohq.com/osv/ECHO-9a76-72a2-0514.json"
ECHO-9a76-72a2-0514 - OSV