streams for Apache Kafka 2/netty-codec-http2
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass | io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 | MavenRed Hat | Medium | Fix reported | |
| Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing | io.netty:netty-codec-httpCryostat 4/netty-codec-http2 | MavenRed Hat | Medium | Fix reported | |
| Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature | io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 | MavenRed Hat | Medium | Fix reported | |
| Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced | io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 | MavenRed Hat | Medium | Fix reported | |
| Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder | io.netty:netty-codec-httpCryostat 4/netty-codec-http2 | MavenRed Hat | Medium | Fix reported |