Security
فارسی
All products

streams for Apache Kafka 3/netty-codec-http2

Red Hat · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing BypassCVE-2026-59900 · GHSA-C69G-56F8-XWQJ io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsingCVE-2026-42580 · GHSA-M4CV-J2PX-7723 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signatureCVE-2026-50560 · GHSA-563Q-J3CM-6JXM io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforcedCVE-2026-47244 · GHSA-5X3R-WRVG-RP6Q io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensionsCVE-2025-58056 · GHSA-FGHV-69VJ-QJ49 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Low Fix reported