| Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header OverwriteCVE-2026-59903 · GHSA-8C42-7QJ2-3J46 |
io.netty:netty-codec-httpExploit Intelligence/exploit-intelligence/agent-client-rhel9 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationCVE-2026-59898 · GHSA-4MP9-239F-G9HG |
io.netty:netty-codec-httpCryostat 4/netty-codec-http |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty: Security Control Bypass via CORS Short-Circuit FailureCVE-2026-56746 · GHSA-6CQP-G7GG-8HR5 |
io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty SPDY SETTINGS frame count materializes unbounded settings mapCVE-2026-55831 · GHSA-6JQX-86GH-F27W |
io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsingCVE-2026-42580 · GHSA-M4CV-J2PX-7723 |
io.netty:netty-codec-httpCryostat 4/netty-codec-http2 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoderCVE-2026-59921 · GHSA-GCJF-9MGH-3P7G |
io.netty:netty-codec-httpCryostat 4/netty-codec-http |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of ServiceCVE-2026-59899 · GHSA-Q4F6-JM68-57WW |
io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncationCVE-2026-55833 · GHSA-MVH2-CRG5-V77C |
io.netty:netty-codec-httpOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permittedCVE-2026-50020 · GHSA-HVCG-QMG6-JM4C |
io.netty:netty-codec-httpCryostat 4/netty-codec-http |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request InjectionCVE-2026-41417 · GHSA-V8H7-RR48-VMMV |
io.netty:netty-codec-httpCryostat 4/netty-codec-http |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871 · GHSA-W9FJ-CFPG-GRVV |
io.netty:netty-codec-http2Cryostat 4/netty-codec-http2 |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Netty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870 · GHSA-PWQR-WMGM-9RR8 |
io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle |
MavenRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoderCVE-2025-67735 · GHSA-84H7-RJJ3-6JX4 |
io.netty:netty-codec-httpCryostat 4/netty-codec-http2 |
MavenRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| io.netty/netty-codec-http: Netty: Denial of Service via unbounded concurrent SPDY streamsCVE-2026-93488 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| io.netty/netty-codec-http: Netty: Denial of Service via unbounded HttpServerCodec HTTP/1.1 pipeline queueCVE-2026-93491 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| io.netty/netty-codec-http: Netty: Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of ServiceCVE-2026-93558 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| io.netty/netty-codec-http: Netty: Incomplete validation of malformed Transfer-Encoding allows HTTP request smugglingCVE-2026-93562 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| io.netty/netty-codec-http: Netty RtspDecoder Method-Token Smuggling via Trailing Control ByteCVE-2026-93565 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
زیاد
|
اصلاح اعلام نشده |
|
| io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to control characters in the chunk-size lineCVE-2026-93566 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
| io.netty/netty-codec-http: Netty split Transfer-Encoding fields bypass final-chunked validation and enable request smugglingCVE-2026-93573 |
Red Hat AMQ Broker 7/netty-codec-httpRed Hat AMQ Clients/netty-codec-http |
Red Hat |
متوسط
|
اصلاح اعلام نشده |
|
