Red Hat build of OptaPlanner 8/netty-codec-http2

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsingCVE-2026-42580 · GHSA-M4CV-J2PX-7723	io.netty:netty-codec-http Cryostat 4/netty-codec-http2	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoSCVE-2026-42587 · GHSA-F6HV-JMP6-3VWV	io.netty:netty-codec-http2 io.netty:netty-codec-http	MavenRed Hat	High	Fix reported	2026-09-10
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871 · GHSA-W9FJ-CFPG-GRVV	io.netty:netty-codec-http2 Cryostat 4/netty-codec-http2	MavenRed Hat	High	Fix reported	2026-09-10
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4	io.netty:netty-codec-http Cryostat 4/netty-codec-http2	MavenRed Hat	Medium	Fix reported	2026-09-10
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensionsCVE-2025-58056 · GHSA-FGHV-69VJ-QJ49	io.netty:netty-codec-http Cryostat 4/netty-codec-http2	MavenRed Hat	Low	Fix reported	2026-09-10
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerabilityCVE-2025-5115 · GHSA-MMXM-8W33-WC4H	org.eclipse.jetty.http2:http2-common org.eclipse.jetty.http2:jetty-http2-common	MavenRed Hat	High	Fix reported	2026-09-10
Netty affected by MadeYouReset HTTP/2 DDoS vulnerabilityCVE-2025-55163 · GHSA-PRJ3-CCX8-P6X4	io.grpc:grpc-netty-shaded io.netty:netty-codec-http2	MavenRed Hat	High	Fix reported	2026-09-10