Red Hat Single Sign-On 7/netty-codec-redis

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46	io.netty:netty-codec-http Exploit Intelligence/exploit-intelligence/agent-client-rhel9	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate stateCVE-2026-56818 · GHSA-P9JM-Q85P-7MCP	io.netty:netty-codec-redis Red Hat Data Grid 8/netty-codec-redis	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty Redis Codec Encoder has a CRLF Injection IssueCVE-2026-42586 · GHSA-RGRR-P7GP-5XJ7	io.netty:netty-codec-redis Red Hat Fuse 7/netty-codec-redis	MavenRed Hat	Medium	Fix reported	2026-09-10
io.netty/netty-codec-redis: Netty: RedisArrayAggregator nested RESP headers multiply patched preallocation limitsCVE-2026-93572	Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8	Red Hat	High	No fix reported	Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypassCVE-2026-89044	Red Hat AMQ Broker 7/netty-buffer Red Hat AMQ Broker 7/netty-codec-haproxy	Red Hat	Medium	No fix reported	Not recorded