Red Hat build of Apache Camel for Spring Boot 4/netty-codec-smtp

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46	io.netty:netty-codec-http Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty has SMTP Command Injection Vulnerability that Allows Email ForgeryCVE-2025-59419 · GHSA-JQ43-27X9-3V86	io.netty:netty-codec-smtp Logging Subsystem for Red Hat OpenShift/netty-codec-smtp	MavenRed Hat	High	Fix reported	2026-09-10
io.netty/netty-codec-smtp: Netty: Unbounded multi-line response accumulation in SmtpResponseDecoder leads to memory-exhaustion DoSCVE-2026-93563	Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8	Red Hat	High	No fix reported	Not recorded
io.netty/netty-codec-smtp: Netty netty-codec-smtp — SMTP command-name field is not CRLF-validated (incomplete fix of CVE-2025-59419)CVE-2026-93576	Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8	Red Hat	High	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded