io.netty:netty-codec
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Netty Lz4FrameDecoder is vulnerable to resource exhaustion | io.netty:netty-codec-compressionio.netty:netty-codec | MavenRed Hat | High | Fix reported | |
| Netty's decoders vulnerable to DoS via zip bomb style attack | io.netty:netty-codec-compressionio.netty:netty-codec | MavenRed Hat | Medium | Fix reported | |
| Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang | io.netty:netty-codec-compressionio.netty:netty-codec | MavenRed Hat | High | Fix reported | |
| Bzip2Decoder doesn't allow setting size restrictions for decompressed data | io.netty:netty-codecio.netty:netty | MavenRed Hat | High | Fix reported | |
| SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way | io.netty:netty-codecio.netty:netty | MavenRed Hat | High | Fix reported |