Red Hat JBoss Enterprise Application Platform 7/netty-handler

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46	io.netty:netty-codec-http Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: Wrapping plain trust manager silently disables hostname verificationCVE-2026-50010 · GHSA-C653-97M9-RCG9	io.netty:netty-handler OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249 · GHSA-3QP7-7MW8-WX86	io.netty:netty-handler OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextCVE-2026-75595 · GHSA-C4C3-7FPV-J4Q5	io.netty:netty-handler Red Hat AMQ Clients/netty-handler	MavenRed Hat	Critical	Fix reported	2026-09-08
io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfigurationCVE-2026-62243	Exploit Intelligence/exploit-intelligence/agent-client-rhel9 OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	Red Hat	High	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded