NE
Product
netty-incubator-codec-ohttp
6
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 2Low 0
Watch
Add netty-incubator-codec-ohttp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48040 | 9.1 | Jun 4 | netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access Affected: < 0.0.22.Final |
| CVE-2024-36121 | 9.1 | Jun 4 | netty-incubator-codec-ohttp is the OHTTP implementation for netty Affected: 0.0.3 before 0.0.11 |
| CVE-2026-54251 | 8.7 | Sep 15 | netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service Affected: < 0.0.23.Final |
| CVE-2024-40642 | 8.1 | Jul 18 | The netty incubator codec.bhttp is a java language binary http parser Affected: before 0.0.13 |
| CVE-2026-48480 | 6.6 | Jun 4 | netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation Affected: < 0.0.22.Final |
| CVE-2026-41207 | 5.3 | Jun 4 | netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures Affected: < 0.0.21.Final |
Showing 6