io.netty vulnerabilities
8 published CVEs name io.netty among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-44248
Netty: Resource exhaustion in MqttDecoder
netty · netty
Medium5.3 - CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS
netty · netty
High7.5 - CVE-2026-42586
Netty: CRLF Injection in Netty Redis Codec Encoder
netty · netty
Medium6.8 - CVE-2026-42585
Netty: HTTP Request Smuggling due to malformed Transfer-Encoding
netty · netty
Medium6.5 - CVE-2026-42584
Netty: HttpClientCodec response desynchronization
netty · netty
High7.3 - CVE-2026-42583
Netty: Lz4FrameDecoder resource exhaustion
netty · netty
High7.5 - CVE-2026-42582
Netty: HTTP/3 QPACK literal unbounded allocation
netty · netty
High7.5 - CVE-2026-42580
Netty: HTTP Request Smuggling due to incorrect chunk size parsing
netty · netty
Medium6.5