Red Hat Fuse 7/netty-handler

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty: Wrapping plain trust manager silently disables hostname verificationCVE-2026-50010 · GHSA-C653-97M9-RCG9	io.netty:netty-handler OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249 · GHSA-3QP7-7MW8-WX86	io.netty:netty-handler OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngineCVE-2025-24970 · GHSA-4G8C-WM8X-JFHW	io.netty:netty-handler Cryostat 3/netty-handler	MavenRed Hat	High	Fix reported	2026-09-10
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416 · GHSA-X4GW-5CX5-PGMH	io.netty:netty-handler OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextCVE-2026-75595 · GHSA-C4C3-7FPV-J4Q5	io.netty:netty-handler Red Hat AMQ Clients/netty-handler	MavenRed Hat	Critical	Fix reported	2026-09-08
io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfigurationCVE-2026-62243	Exploit Intelligence/exploit-intelligence/agent-client-rhel9 OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	Red Hat	High	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded