CWE-1035

Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

Red Hat · Red Hat Build of Debezium 3.6

Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)

Red Hat · Red Hat Build of Debezium 3.6

Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line

Red Hat · Red Hat Build of Debezium 3.6

Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte

Red Hat · Red Hat Build of Apache Camel 3.33.3.SP2

Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)

Red Hat · Red Hat Build of Apache Camel 3.33.3.SP2

Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service

Red Hat · Red Hat Build of Apache Camel 3.33.3.SP2

Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos

Red Hat · Red Hat build of Apache Camel for Spring Boot 4

Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size

Red Hat · Red Hat Build of Debezium 3.6

Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos

Red Hat · Red Hat build of Apache Camel for Spring Boot 4

Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass

Red Hat · Red Hat build of Apache Camel for Spring Boot 4