Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator

Netty: SCTP reassembly nests buffers without bound

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Netty has Unbounded Direct Memory Consumption in its RedisDecoder

Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing