All products

Red Hat build of Debezium 2/netty-codec-http2

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871 · GHSA-W9FJ-CFPG-GRVV io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 MavenRed Hat High Fix reported
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Medium Fix reported
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensionsCVE-2025-58056 · GHSA-FGHV-69VJ-QJ49 io.netty:netty-codec-httpCryostat 4/netty-codec-http2 MavenRed Hat Low Fix reported
Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerabilityCVE-2025-5115 · GHSA-MMXM-8W33-WC4H org.eclipse.jetty.http2:http2-commonorg.eclipse.jetty.http2:jetty-http2-common MavenRed Hat High Fix reported
Netty affected by MadeYouReset HTTP/2 DDoS vulnerabilityCVE-2025-55163 · GHSA-PRJ3-CCX8-P6X4 io.grpc:grpc-netty-shadedio.netty:netty-codec-http2 MavenRed Hat High Fix reported