Red Hat Single Sign-On 7/netty-codec-haproxy

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46	io.netty:netty-codec-http Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX AddressCVE-2026-59919 · GHSA-WH89-7897-X99H	io.netty:netty-codec-haproxy Cryostat 4/netty-codec-haproxy	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: [codec-haproxy] Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory ExhaustionCVE-2026-55851 · GHSA-Q6CQ-MHR2-JMR5	io.netty:netty-codec-haproxy OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9	MavenRed Hat	High	Fix reported	2026-09-10
io.netty/netty-codec-haproxy: Netty: HAProxy PROXY-v2 nested-TLV grandchild ByteBuf reference-count leak (incomplete fix of PR #16881)CVE-2026-93564	Red Hat AMQ Broker 7/netty-codec-haproxy Red Hat Fuse 7/netty-codec-haproxy	Red Hat	High	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded