Login Request a demo
RN
Product
Reactor Netty
by Broadcom · last CVE Aug 26, 2026
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 4Medium 4Low 2
Severity
All severities10Critical0High4Medium4Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Reactor Netty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-11284
8.6
1%
Oct 17
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones
Affected: 0.8.0 before 0.8.11
CVE-2023-34054
7.5
1%
Nov 28
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP requests that may…
Affected: before 1.0.39; 1.1.0 before 1.1.13
CVE-2023-34062
7.5
1%
Nov 15
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to…
Affected: 1.0.0 before 1.0.39; 1.1.0 before 1.1.13
CVE-2020-5403
7.5
1%
Mar 3
Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response
Affected: 0.9.3; 0.9.4
Showing 4