Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

Picketlink-federation: auth bypass in picketlink saml unsolicited-response

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation

Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

Netty: HttpClientCodec response desynchronization

Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default

Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller

Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection

Openjdk-orb: unauthed class loading via iiop in eap

Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method

Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

Undertow-core: oom via missing limits in chunked trailer in eap's undertow

Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length

Netty's wrapping plain trust manager silently disables hostname verification

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

Netty: SCTP reassembly nests buffers without bound

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Netty has Unbounded Direct Memory Consumption in its RedisDecoder

Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

Non-constant time comparisons risk private key leakage in FrodoKEM.

GOSTCTR implementation unable to process more than 255 blocks correctly

Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

Undertow: undertow madeyoureset http/2 ddos vulnerability

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery

LDAP Injection Vulnerability in LDAPStoreHelper.java