HTTP/2 Rapid Reset Attack Vulnerability

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass

Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion

Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3

Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS

Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation

Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention

Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection

Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass

Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing

Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Netty: Memory Exhaustion in SctpMessageCompletionHandler

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation

Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)

Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation

Netty SPDY SETTINGS frame count materializes unbounded settings map

Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder

Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length

Netty's wrapping plain trust manager silently disables hostname verification

Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

Netty: SCTP reassembly nests buffers without bound

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty's Default QUIC token handler accepts any client-supplied token

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size

Netty has Unbounded Direct Memory Consumption in its RedisDecoder

Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays

Netty: Resource exhaustion in MqttDecoder

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Request Smuggling due to malformed Transfer-Encoding

Netty: Lz4FrameDecoder resource exhaustion

Netty: HTTP/3 QPACK literal unbounded allocation

Netty: epoll transport denial of service via RST on half-closed TCP connection

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients

Netty is an asynchronous, event-driven network application framework