RN
Product
Reactor Netty
10
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 2
Watch
Add Reactor Netty to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47848 | 6.1 | Aug 26 | Reactor Netty WebSocket Client Leaks Credentials On Redirect Affected: before 1.0.53; 1.1.0 before 1.2.19; 1.3.0 before 1.3.6.1 |
| CVE-2020-5404 | 5.9 | Mar 3 | The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a… Affected: 0.8.0 through 0.8.15; 0.9.0 through 0.9.4 |
| CVE-2026-47845 | 5.3 | Aug 26 | Reactor Netty HTTP Server may incorrectly evaluate proxy addresses Affected: before 1.0.53; 1.1.0 before 1.2.19; 1.3.0 before 1.3.6.1 |
| CVE-2022-31684 | 4.3 | Oct 19 | Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests Affected: 1.0.11 through 1.0.23 |
Showing 4