Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing

Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)

Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling

Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line

LDAP Injection Vulnerability in LDAPStoreHelper.java

Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

Infinispan: circular reference on marshalling leads to dos

Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size

Apache Thrift: Rust implementation vulnerable to CVE-2020-13949 pattern

Undertow: learningpushhandler can lead to remote memory dos attacks

Org.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror