Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Netty's wrapping plain trust manager silently disables hostname verification

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.

PKIX draft CompositeVerifier accepts empty signature sequence as valid.

Non-constant time comparisons risk private key leakage in FrodoKEM.

GOSTCTR implementation unable to process more than 255 blocks correctly