IO
Vendor
io.netty
10
CVEs
0
On KEV
0
New 30D
Products
NE9.1
netty-codec-http
io.netty
4 CVEs0 on KEV0 new
NE7.5
netty-codec
io.netty
1 CVEs0 on KEV0 new
NE7.5
netty-codec-compression
io.netty
1 CVEs0 on KEV0 new
NE7.5
netty-codec-http2
io.netty
1 CVEs0 on KEV0 new
NE7.5
netty-codec-http3
io.netty
1 CVEs0 on KEV0 new
NE7.5
netty-codec-mqtt
io.netty
1 CVEs0 on KEV0 new
NE7.1
netty-codec-redis
io.netty
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-44248 | NE netty-codec-mqtt io.netty | 7.5 | May 13 | Netty: Resource exhaustion in MqttDecoder |
| CVE-2026-42587 | NE netty-codec-http io.netty | 7.5 | May 13 | Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS |
| CVE-2026-42586 | NE netty-codec-redis io.netty | 7.1 | May 13 | Netty: CRLF Injection in Netty Redis Codec Encoder |
| CVE-2026-42585 | NE netty-codec-http io.netty | 7.5 | May 13 | Netty: HTTP Request Smuggling due to malformed Transfer-Encoding |
| CVE-2026-42584 | NE netty-codec-http io.netty | 9.1 | May 13 | Netty: HttpClientCodec response desynchronization |
| CVE-2026-42583 | NE netty-codec-compression io.netty | 7.5 | May 13 | Netty: Lz4FrameDecoder resource exhaustion |
| CVE-2026-42582 | NE netty-codec-http3 io.netty | 7.5 | May 13 | Netty: HTTP/3 QPACK literal unbounded allocation |
| CVE-2026-42580 | NE netty-codec-http io.netty | 6.5 | May 13 | Netty: HTTP Request Smuggling due to incorrect chunk size parsing |