vciy

CVEs we hold for Netty

Records whose assigning authority named Netty as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-89044Netty 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final HTTP Request Smuggling via…netty
CVE-2026-76816Netty: MQTT Topic Name and Client ID Validation Bypassnetty
CVE-2026-75596Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsingnetty
CVE-2026-75595Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContextnetty
CVE-2026-73508Netty: Memory Leak in DNS Record Decoder via Malformed Domain Namesnetty
CVE-2026-73507Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustionnetty
CVE-2026-62380Netty before 4.2.16.Final SOCKS Proxy Null Byte Injectionnetty
CVE-2026-62243Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypassnetty
CVE-2026-59921Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncodernetty
CVE-2026-59920Netty: STOMP CONNECT Frame Header Injectionnetty
CVE-2026-59919Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Addressnetty
CVE-2026-59903Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwritenetty
CVE-2026-59902Netty: Memory Exhaustion in SctpMessageCompletionHandlernetty
CVE-2026-59901Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hangnetty
CVE-2026-59900Netty codec-http2: Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypassnetty
CVE-2026-59899Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Servicenetty
CVE-2026-59898Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationnetty
CVE-2026-56822Netty: TOCTOU in OcspServerCertificateValidatornetty
CVE-2026-56821Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidatornetty
CVE-2026-56820Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacksnetty
CVE-2026-56819Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct…netty
CVE-2026-56818Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate statenetty
CVE-2026-56817Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enablednetty
CVE-2026-56816Netty: Memory Exhaustion via HTTP/3 Reserved Frame Typesnetty
CVE-2026-56746Netty has a Security Control Bypass via CORS Short-Circuit Failurenetty
CVE-2026-56745Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustionnetty
CVE-2026-55851Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustionnetty
CVE-2026-55833Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncationnetty
CVE-2026-55831Netty SPDY SETTINGS frame count materializes unbounded settings mapnetty
CVE-2026-54251netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway…netty-incubator-codec-ohttp; io.netty.incubator…
CVE-2026-50560Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signaturenetty
CVE-2026-50020Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permittednetty
CVE-2026-50011Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array lengthnetty
CVE-2026-50010Netty's wrapping plain trust manager silently disables hostname verificationnetty
CVE-2026-50009Netty QUIC stateless reset token material exposed through header-visible connection IDsnetty
CVE-2026-48748Netty HTTP/3 QPACK Blocked Streams Memory Exhaustionnetty
CVE-2026-48480netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream…netty-incubator-codec-ohttp
CVE-2026-48059Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustionnetty
CVE-2026-48043netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustionnetty
CVE-2026-48040netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to…netty-incubator-codec-ohttp
CVE-2026-48006Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregatornetty
CVE-2026-47691Netty has Insufficient Bailiwick Validation for NS Recordsnetty
CVE-2026-47244Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforcednetty
CVE-2026-46340Netty: SCTP reassembly nests buffers without boundnetty
CVE-2026-45674Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Recordsnetty
CVE-2026-45673Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Portnetty
CVE-2026-45536Netty: Unix-socket fd receive leaks descriptors when peer sends two at oncenetty
CVE-2026-45416Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesnetty
CVE-2026-44894Netty's Default QUIC token handler accepts any client-supplied tokennetty
CVE-2026-44893Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthnetty
CVE-2026-44892Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Sizenetty
CVE-2026-44891Netty: Denial of Service via Unbounded Headers in StompSubframeDecodernetty
CVE-2026-44890Netty has Unbounded Direct Memory Consumption in its RedisDecodernetty
CVE-2026-44250Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arraysnetty
CVE-2026-44249Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Maskingnetty
CVE-2026-44248Netty: Resource exhaustion in MqttDecodernetty; io.netty netty-codec-mqtt
CVE-2026-42587Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSnetty; io.netty netty-codec-http; io.netty netty-codec-http2
CVE-2026-42586Netty: CRLF Injection in Netty Redis Codec Encodernetty; io.netty netty-codec-redis
CVE-2026-42585Netty: HTTP Request Smuggling due to malformed Transfer-Encodingnetty; io.netty netty-codec-http
CVE-2026-42584Netty: HttpClientCodec response desynchronizationnetty; io.netty netty-codec-http
CVE-2026-42583Netty: Lz4FrameDecoder resource exhaustionnetty; io.netty netty-codec; io.netty…
CVE-2026-42582Netty: HTTP/3 QPACK literal unbounded allocationnetty; io.netty netty-codec-http3
CVE-2026-42581Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitizationnetty
CVE-2026-42580Netty: HTTP Request Smuggling due to incorrect chunk size parsingnetty; io.netty netty-codec-http
CVE-2026-42579Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)netty
CVE-2026-42578Netty: HTTP Header Injection via HttpProxyHandler Disabled Validationnetty
CVE-2026-42577Netty: epoll transport denial of service via RST on half-closed TCP connectionnetty
CVE-2026-41417Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()netty
CVE-2026-41207netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failuresnetty-incubator-codec-ohttp
CVE-2026-33871Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypassnetty
CVE-2026-33870Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsingnetty
CVE-2026-100666Netty 4.2.0 through 4.2.16 Response Desynchronization via HttpServerCodecnetty
CVE-2026-100665Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypassnetty
CVE-2026-100664Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusionnetty
CVE-2026-100663Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3netty
CVE-2026-100662Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoSnetty
CVE-2026-100661Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulationnetty
CVE-2026-100660Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retentionnetty
CVE-2026-100659Netty 4.2.0 through 4.2.17 HTTP/3 Request Routing Bypassnetty
CVE-2025-67735Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncodernetty
CVE-2025-59419Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgerynetty
CVE-2025-58057Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attacknetty
CVE-2025-58056Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensionsnetty
CVE-2025-55163Netty MadeYouReset HTTP/2 DDoS Vulnerabilitynetty
CVE-2025-29908Netty QUIC hash collision DoS attacknetty-incubator-codec-quic
CVE-2025-25193Denial of Service attack on windows app using Nettynetty
CVE-2025-24970SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEnginenetty
CVE-2024-47535Denial of Service attack on windows app using Nettynetty
CVE-2024-40642Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttpnetty-incubator-codec-ohttp
CVE-2024-36121netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Noncesnetty-incubator-codec-ohttp
CVE-2024-29025Netty HttpPostRequestDecoder can OOMnetty
CVE-2023-34462netty-handler SniHandler 16MB allocationnetty
CVE-2022-41915no title heldnetty
CVE-2022-41881no title heldnetty
CVE-2022-24823Local Information Disclosure Vulnerability in io.netty:netty-codec-httpnetty
CVE-2021-43797HTTP fails to validate against control chars in header names which may lead to HTTP request smugglingnetty
CVE-2021-21409Possible request smuggling in HTTP/2 due missing validation of content-lengthnetty
CVE-2021-21295Possible request smuggling in HTTP/2 due missing validationnetty io.netty:netty-codec-http2
CVE-2021-21290Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary filesnetty

99 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.