Security
فارسی
All products

io.netty:netty-handler

Maven · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty: Wrapping plain trust manager silently disables hostname verificationCVE-2026-50010 · GHSA-C653-97M9-RCG9 io.netty:netty-handlerOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249 · GHSA-3QP7-7MW8-WX86 io.netty:netty-handlerOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngineCVE-2025-24970 · GHSA-4G8C-WM8X-JFHW io.netty:netty-handlerCryostat 3/netty-handler MavenRed Hat High Fix reported
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416 · GHSA-X4GW-5CX5-PGMH io.netty:netty-handlerOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
netty-handler SniHandler 16MB allocationCVE-2023-34462 · GHSA-6MJQ-H674-J845 io.netty:netty-handlerA-MQ Clients 2/netty MavenRed Hat Medium Fix reported
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextCVE-2026-75595 · GHSA-C4C3-7FPV-J4Q5 io.netty:netty-handlerRed Hat AMQ Clients/netty-handler MavenRed Hat Critical Fix reported
Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsingCVE-2026-75596 · GHSA-FCCG-MWVH-QQG4 io.netty:netty-handler Maven Medium Fix reported
HTTP Request Smuggling in NettyCVE-2020-7238 · GHSA-FF2W-CQ2G-WV5F io.netty:netty-handlerRed Hat BPM Suite 6/netty MavenRed Hat High Fix reported
Denial of Service in NettyCVE-2020-11612 · GHSA-MM9X-G8PC-W292 io.netty:netty-handlerRed Hat Fuse 7/karaf-transaction-manager-narayana MavenRed Hat High Fix reported
Loop with Unreachable Exit Condition in NettyCVE-2016-4970 · GHSA-RV63-GQM8-9W8Q io.netty:netty-handlerRed Hat JBoss Enterprise Application Platform 7/netty MavenRed Hat High Fix reported
HTTP Request Smuggling in NettyCVE-2019-20445 · GHSA-P2V9-G2QV-P635 io.netty:netty-handlerio.netty:netty MavenRed Hat Medium Fix reported
Denial of service in NettyCVE-2014-3488 · GHSA-9959-6P3M-WXPC io.netty:netty-handler Maven Medium Fix reported