Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

Netty: HttpClientCodec response desynchronization

Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication

HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Quarkus authorization bypass via semicolon path normalization inconsistency

jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)

Resteasy-core: resteasy sourceprovider remote unauthenticated file read

Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities

Netty's wrapping plain trust manager silently disables hostname verification

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Micrometer HTTP server instrumentations DoS vulnerability

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

GOSTCTR implementation unable to process more than 255 blocks correctly

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config

Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding

Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

LDAP Injection Vulnerability in LDAPStoreHelper.java

Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload