Red Hat build of Apicurio Registry 3/netty-codec-haproxy

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory ExhaustionCVE-2026-48059 · GHSA-H2QV-FJ59-J46J	io.netty:netty-codec-haproxy OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-18
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46	io.netty:netty-codec-http Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX AddressCVE-2026-59919 · GHSA-WH89-7897-X99H	io.netty:netty-codec-haproxy Cryostat 4/netty-codec-haproxy	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory ExhaustionCVE-2026-55851 · GHSA-Q6CQ-MHR2-JMR5	io.netty:netty-codec-haproxy OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthCVE-2026-44893 · GHSA-CC37-9Q2J-3HFV	io.netty:netty-codec-haproxy OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
io.netty/netty-codec-haproxy: Netty: HAProxy PROXY-v2 nested-TLV grandchild ByteBuf reference-count leak (incomplete fix of PR #16881)CVE-2026-93564	Red Hat AMQ Broker 7/netty-codec-haproxy Red Hat Fuse 7/netty-codec-haproxy	Red Hat	High	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded