io.netty netty-codec-http vulnerabilities
4 published CVEs name io.netty netty-codec-http among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS
netty · netty
High7.5 - CVE-2026-42585
Netty: HTTP Request Smuggling due to malformed Transfer-Encoding
netty · netty
Medium6.5 - CVE-2026-42584
Netty: HttpClientCodec response desynchronization
netty · netty
High7.3 - CVE-2026-42580
Netty: HTTP Request Smuggling due to incorrect chunk size parsing
netty · netty
Medium6.5