CVE-2026-44891 · Brief

CVEs like CVE-2026-44891

The records whose text reads closest to CVE-2026-44891, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2019-204450.667
   HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second…

   Same vendor or product family, netty.

2. CVE-2017-137630.676
   ONOS versions 1.8.0, 1.9.0, and 1.10.0 do not restrict the amount of memory allocated.

   Related weakness classes, CWE-400 is above CWE-770.

3. CVE-2026-934940.717
   Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

4. CVE-2022-418810.673
   Netty project is an event-driven asynchronous network application framework.

   Same vendor or product family, netty.

5. CVE-2026-543990.663
   Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration

   Same weakness class, CWE-400 (uncontrolled resource consumption).

6. CVE-2014-01930.701
   WebSocket08FrameDecoder in Netty 3.6.x before 3.6.9, 3.7.x before 3.7.1, 3.8.x before 3.8.2, 3.9.x before 3.9.1, and…

   Same vendor or product family, netty.

7. CVE-2026-448920.774
   Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size

   Same weakness class, CWE-400 (uncontrolled resource consumption); same vendor or product family, netty.

8. CVE-2020-116120.713
   The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte…

   Related weakness classes, CWE-400 is above CWE-770; same vendor or product family, netty.

9. CVE-2026-935600.743
   Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

10. CVE-2026-935630.662
    Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to…

    Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.