Red Hat build of Debezium 2/netty-codec-http2
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass | io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 | MavenRed Hat | High | Fix reported | |
| Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder | io.netty:netty-codec-httpCryostat 4/netty-codec-http2 | MavenRed Hat | Medium | Fix reported | |
| Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions | io.netty:netty-codec-httpCryostat 4/netty-codec-http2 | MavenRed Hat | Low | Fix reported | |
| Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability | org.eclipse.jetty.http2:http2-commonorg.eclipse.jetty.http2:jetty-http2-common | MavenRed Hat | High | Fix reported | |
| Netty affected by MadeYouReset HTTP/2 DDoS vulnerability | io.grpc:grpc-netty-shadedio.netty:netty-codec-http2 | MavenRed Hat | High | Fix reported |

