Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Single Sign-On 7/netty-handler
Red Hat
· Package
5 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite
CVE-2026-59903 · GHSA-8C42-7QJ2-3J46
io.netty:netty-codec-http
Exploit Intelligence/exploit-intelligence/agent-client-rhel9
Maven
Red Hat
Medium
Fix reported
2026-09-10
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
CVE-2025-24970 · GHSA-4G8C-WM8X-JFHW
io.netty:netty-handler
Cryostat 3/netty-handler
Maven
Red Hat
High
Fix reported
2026-09-10
Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext
CVE-2026-75595 · GHSA-C4C3-7FPV-J4Q5
io.netty:netty-handler
Red Hat AMQ Clients/netty-handler
Maven
Red Hat
Critical
Fix reported
2026-09-08
io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration
CVE-2026-62243
Exploit Intelligence/exploit-intelligence/agent-client-rhel9
OpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9
Red Hat
High
No fix reported
Not recorded
netty: Netty: HTTP Request Smuggling via Transfer-Encoding header validation bypass
CVE-2026-89044
Red Hat AMQ Broker 7/netty-buffer
Red Hat AMQ Broker 7/netty-codec-haproxy
Red Hat
Medium
No fix reported
Not recorded
