Netty has Insufficient Bailiwick Validation for NS Records

Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation

Netty: HttpClientCodec response desynchronization

Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Netty's wrapping plain trust manager silently disables hostname verification

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

Non-constant time comparisons risk private key leakage in FrodoKEM.

GOSTCTR implementation unable to process more than 255 blocks correctly

Jastow: jastow cross-site scripting attack due to unsanitized uri

LDAP Injection Vulnerability in LDAPStoreHelper.java