RN
Product
Reactor Netty
by Spring · last CVE Aug 26, 2026
6
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 2
Watch

Add Reactor Netty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47848
6.1
0%
Aug 26
Reactor Netty WebSocket Client Leaks Credentials On Redirect
Affected: 1.3.0 through 1.3.6; 1.1.0 through 1.2.18; through 1.0.52
CVE-2026-41715
6.1
0%
Jun 9
Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
Affected: 1.0.0 before 1.0.52; 1.1.0 before 1.1.36; 1.2.0 before 1.2.17.1; 1.3.0 before 1.3.15.1
CVE-2026-47874
5.3
0%
Aug 26
Reactor Netty HTTP Server Denial of Service With Pipelined Requests
Affected: 1.3.0 through 1.3.6; 1.1.0 through 1.2.18; through 1.0.52
CVE-2026-47845
5.3
0%
Aug 26
Reactor Netty HTTP Server may incorrectly evaluate proxy addresses
Affected: 1.3.0 through 1.3.6; 1.1.0 through 1.2.18; through 1.0.52
Showing 4