Security
فارسی
All products

Red Hat build of Apicurio Registry 2/netty-codec-http

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationCVE-2026-42581 · GHSA-XXQH-MFJM-7MV9 io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat Medium Fix reported
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsingCVE-2026-42580 · GHSA-M4CV-J2PX-7723 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoSCVE-2026-42587 · GHSA-F6HV-JMP6-3VWV io.netty:netty-codec-http2io.netty:netty-codec-http MavenRed Hat High Fix reported
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-EncodingCVE-2026-42585 · GHSA-38F8-5428-X5CV io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty has HttpClientCodec response desynchronizationCVE-2026-42584 · GHSA-57RV-R2G8-2CJ3 io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 MavenRed Hat High Fix reported
Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request InjectionCVE-2026-41417 · GHSA-V8H7-RR48-VMMV io.netty:netty-codec-httpCryostat 4/netty-codec-http MavenRed Hat Medium Fix reported
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871 · GHSA-W9FJ-CFPG-GRVV io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat High Fix reported
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870 · GHSA-PWQR-WMGM-9RR8 io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle MavenRed Hat High Fix reported
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensionsCVE-2025-58056 · GHSA-FGHV-69VJ-QJ49 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Low Fix reported