RN
Product
Reactor Netty
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 2
Watch
Add Reactor Netty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11284 | 8.6 | Oct 17 | Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones Affected: 0.8.0 before 0.8.11 |
| CVE-2023-34054 | 7.5 | Nov 28 | In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may… Affected: before 1.0.39; 1.1.0 before 1.1.13 |
| CVE-2023-34062 | 7.5 | Nov 15 | In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to… Affected: 1.0.0 before 1.0.39; 1.1.0 before 1.1.13 |
| CVE-2020-5403 | 7.5 | Mar 3 | Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response Affected: 0.9.3; 0.9.4 |
| CVE-2026-47848 | 6.1 | Aug 26 | Reactor Netty WebSocket Client Leaks Credentials On Redirect Affected: before 1.0.53; 1.1.0 before 1.2.19; 1.3.0 before 1.3.6.1 |
| CVE-2020-5404 | 5.9 | Mar 3 | The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a… Affected: 0.8.0 through 0.8.15; 0.9.0 through 0.9.4 |
| CVE-2026-47845 | 5.3 | Aug 26 | Reactor Netty HTTP Server may incorrectly evaluate proxy addresses Affected: before 1.0.53; 1.1.0 before 1.2.19; 1.3.0 before 1.3.6.1 |
| CVE-2022-31684 | 4.3 | Oct 19 | Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests Affected: 1.0.11 through 1.0.23 |
| CVE-2026-47844 | 3.7 | Aug 26 | Reactor Netty HTTP Server Leaks Exception Details Affected: before 1.0.53; 1.1.0 before 1.2.19; 1.3.0 before 1.3.6.1 |
| CVE-2026-47843 | 3.7 | Aug 26 | Reactor Netty may incorrectly route traffic due to DNS resolver reuse Affected: before 1.0.53; 1.1.0 before 1.2.19; 1.3.0 before 1.3.6.1 |
Showing 10