Security
فارسی
All products

Red Hat build of Apache Camel - HawtIO 4/netty-codec-http

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationCVE-2026-59898 · GHSA-4MP9-239F-G9HG io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: Security Control Bypass via CORS Short-Circuit FailureCVE-2026-56746 · GHSA-6CQP-G7GG-8HR5 io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat Medium Fix reported
Netty SPDY SETTINGS frame count materializes unbounded settings mapCVE-2026-55831 · GHSA-6JQX-86GH-F27W io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoderCVE-2026-59921 · GHSA-GCJF-9MGH-3P7G io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of ServiceCVE-2026-59899 · GHSA-Q4F6-JM68-57WW io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat Medium Fix reported
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncationCVE-2026-55833 · GHSA-MVH2-CRG5-V77C io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permittedCVE-2026-50020 · GHSA-HVCG-QMG6-JM4C io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871 · GHSA-W9FJ-CFPG-GRVV io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat High Fix reported
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870 · GHSA-PWQR-WMGM-9RR8 io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle MavenRed Hat High Fix reported
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensionsCVE-2025-58056 · GHSA-FGHV-69VJ-QJ49 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Low Fix reported
Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory ExhaustionCVE-2026-56745 · GHSA-JPPX-W49H-X2QQ io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported