Security
فارسی
All products

Red Hat AMQ Broker 7/netty-codec-http

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationCVE-2026-59898 · GHSA-4MP9-239F-G9HG io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsingCVE-2026-42580 · GHSA-M4CV-J2PX-7723 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-EncodingCVE-2026-42585 · GHSA-38F8-5428-X5CV io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoderCVE-2026-59921 · GHSA-GCJF-9MGH-3P7G io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permittedCVE-2026-50020 · GHSA-HVCG-QMG6-JM4C io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request InjectionCVE-2026-41417 · GHSA-V8H7-RR48-VMMV io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streamsCVE-2026-93488 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat High No fix reported
io.netty/netty-codec-http: Netty: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queueCVE-2026-93491 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat High No fix reported
io.netty/netty-codec-http: Netty: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of ServiceCVE-2026-93558 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat High No fix reported
io.netty/netty-codec-http: Netty: Incomplete validation of malformed Transfer-Encoding allows HTTP request smugglingCVE-2026-93562 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat Medium No fix reported
io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control ByteCVE-2026-93565 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat High No fix reported
io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to control characters in the chunk-size lineCVE-2026-93566 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat Medium No fix reported
io.netty/netty-codec-http: Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smugglingCVE-2026-93573 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat Medium No fix reported
io.netty/netty-codec-http: Netty: HTTP request smuggling via post-digit whitespace in chunk-size parsingCVE-2026-93574 Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http Red Hat Medium No fix reported
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044 Red Hat AMQ Broker 7/netty-bufferRed Hat AMQ Broker 7/netty-codec-haproxy Red Hat Medium No fix reported
io.netty/netty-codec-http: Netty: Denial of Service via unbounded queue growth during HTTP request pipeliningCVE-2026-100656 Exploit Intelligence/exploit-intelligence/agent-client-rhel9OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 Red Hat High No fix reported
io.netty/netty-codec-http: Netty: Denial of Service via unbounded queue in WebSocketServerExtensionHandlerCVE-2026-100658 Exploit Intelligence/exploit-intelligence/agent-client-rhel9OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 Red Hat Medium No fix reported