An open API service providing security vulnerability metadata for many open source software ecosystems.

Browse Security Advisories

Moderate
10 months ago

Netty's decoders vulnerable to DoS via zip bomb style attack GSA_kwCzR0hTQS0zcDhtLWo4NXEtcGdtas4ABLos

maven io.netty:netty-codec, io.netty:netty-codec-compression
Moderate
over 2 years ago

Netty's HttpPostRequestDecoder can OOM GSA_kwCzR0hTQS01anBtLXg1OHYtNjI0ds4AA6Rf

maven io.netty:netty-codec-http
Moderate
about 3 years ago

netty-handler SniHandler 16MB allocation GSA_kwCzR0hTQS02bWpxLWg2NzQtajg0Nc4AAz9j

maven io.netty:netty-handler
Moderate
over 3 years ago

HAProxyMessageDecoder Stack Exhaustion DoS GSA_kwCzR0hTQS1meDJjLTk2dmotOTg1ds4AAwRn

maven io.netty:netty-codec-haproxy
Moderate
about 4 years ago

Netty denial of service vulnerability GSA_kwCzR0hTQS03dnBxLWc5OTgtcXB2N84AATGb

maven io.netty:netty-all, io.netty:netty
Moderate
over 4 years ago

HTTP request smuggling in netty GSA_kwCzR0hTQS13eDVqLTU0bW0tcnFxcc0ahg

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http
High
almost 5 years ago

Bzip2Decoder doesn't allow setting size restrictions for decompressed data GSA_kwCzR0hTQS1ncmc0LXdmMjktcjl2ds0Vrg

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec
Moderate
over 5 years ago

Possible request smuggling in HTTP/2 due missing validation of content-length MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWYyNTYtajk2NS03ZjMy

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http2
Moderate
over 5 years ago

Possible request smuggling in HTTP/2 due missing validation MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXdtNDctOHY1cC13anBq

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http2
Moderate
over 5 years ago

Local Information Disclosure Vulnerability in Netty on Unix-Like systems MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTVtY3ItZ3E2Yy0zaHEy

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http
Moderate
about 6 years ago

Denial of service in Netty MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTk5NTktNnAzbS13eHBj

maven io.netty:netty-handler
High
about 6 years ago

Information Exposure in Netty MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhmdjMtcnJmbS1mMnJ2

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-parent
Critical
over 6 years ago

HTTP Request Smuggling in Netty MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWNxcWotNHA2My1ycm1t

maven io.netty:netty, org.jboss.netty:netty
Moderate
over 6 years ago

HTTP Request Smuggling in Netty MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXAydjktZzJxdi1wNjM1

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-handler
High
over 6 years ago

HTTP Request Smuggling in Netty MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA5NzktNG1mdy01M3Zn

maven io.netty:netty, org.jboss.netty:netty, io.netty:netty-all

Filter by Severity

Filter by Source

Filter by Ecosystem

Filter by Package

openclaw 591 moodle/moodle 437 tensorflow 433 tensorflow-cpu 406 tensorflow-gpu 398 magento/community-edition 361 org.jenkins-ci.main:jenkins-core 252 Microsoft.ChakraCore 247 github.com/mattermost/mattermost/server/v8 198 github.com/mattermost/mattermost-server 175 typo3/cms 167 org.apache.tomcat:tomcat 157 com.liferay.portal:release.portal.bom 150 wwbn/avideo 144 Magick.NET-Q16-AnyCPU 133 pimcore/pimcore 132 Magick.NET-Q16-HDRI-AnyCPU 130 Magick.NET-Q16-HDRI-OpenMP-arm64 128 dolibarr/dolibarr 125 Magick.NET-Q16-HDRI-x86 125 Magick.NET-Q16-HDRI-x64 124 com.liferay.portal:release.dxp.bom 124 Magick.NET-Q16-HDRI-arm64 124 Magick.NET-Q16-OpenMP-arm64 122 Magick.NET-Q8-AnyCPU 121 Magick.NET-Q16-OpenMP-x64 120 typo3/cms-core 120 Magick.NET-Q16-x86 119 concrete5/concrete5 119 Magick.NET-Q16-arm64 119 magento/project-community-edition 118 Magick.NET-Q8-OpenMP-arm64 117 parse-server 116 Magick.NET-Q16-x64 114 Magick.NET-Q8-arm64 114 Magick.NET-Q8-x86 112 Magick.NET-Q8-OpenMP-x64 112 apache-airflow 111 craftcms/cms 109 Django 107 phpmyadmin/phpmyadmin 107 open-webui 107 drupal/core 107 microweber/microweber 105 Magick.NET-Q8-x64 105 thorsten/phpmyfaq 105 n8n 100 librenms/librenms 100 org.keycloak:keycloak-services 96 Magick.NET-Q16-HDRI-OpenMP-x64 94 silverstripe/framework 89 symfony/symfony 87 flowise 86 com.fasterxml.jackson.core:jackson-databind 76 mlflow 75 github.com/usememos/memos 75 gogs.io/gogs 75 shopware/platform 74 drupal/drupal 72 getgrav/grav 69 salt 67 apache-superset 66 mantisbt/mantisbt 65 ansible 65 shopware/core 64 Magick.NET-Q16-OpenMP-x86 62 github.com/grafana/grafana 62 github.com/rancher/rancher 61 picklescan 59 org.apache.struts:struts2-core 59 actionpack 59 snipe/snipe-it 57 org.apache.tomcat.embed:tomcat-embed-core 56 mautic/core 56 baserproject/basercms 56 directus 56 nokogiri 56 froxlor/froxlor 55 next 55 github.com/hashicorp/vault 55 nocodb 54 Plone 54 vllm 54 surrealdb 52 github.com/siyuan-note/siyuan/kernel 51 org.keycloak:keycloak-core 50 rack 50 admidio/admidio 49 nova 49 electron 48 django 48 gradio 48 getkirby/cms 47 pyload-ng 46 org.xwiki.platform:xwiki-platform-oldcore 45 github.com/traefik/traefik/v2 45 perl 45 matrix-synapse 45 org.elasticsearch:elasticsearch 44 aiohttp 44 vyper 44 coreutils 44 vm2 43 rdiffweb 43 showdoc/showdoc 42 k8s.io/kubernetes 42 DBD-SQLite 42 code.gitea.io/gitea 42 nilsteampassnet/teampass 42 github.com/traefik/traefik/v3 41 plone 41 phpmyfaq/phpmyfaq 41 intelliants/subrion 41 hono 40 keystone 39 praisonai 39 github.com/zitadel/zitadel 39 wasmtime 39 net.mingsoft:ms-mcms 39 io.undertow:undertow-core 39 github.com/mattermost/mattermost-server/v6 38 statamic/cms 37 PraisonAI 37 com.thoughtworks.xstream:xstream 37 github.com/argoproj/argo-cd/v2 37 MT 37 DotNetNuke.Core 36 com.jfinal:jfinal 36 deno 36 ci4-cms-erp/ci4ms 36 github.com/cilium/cilium 35 moin 35 github.com/filebrowser/filebrowser/v2 34 github.com/hashicorp/nomad 34 org.jenkins-ci.plugins:script-security 34 github.com/answerdev/answer 34 pillow 34 github.com/docker/docker 33 praisonaiagents 33 axios 33 org.apache.tomcat:tomcat-catalina 33 code.vikunja.io/api 33 shopware/shopware 33 pypdf 32 zendframework/zendframework1 32 langflow 32 github.com/hashicorp/consul 32 opencv-python 31 contao/core-bundle 31 opencv-contrib-python 31 prestashop/prestashop 31 org.opencms:opencms-core 31 github.com/argoproj/argo-cd 31 pocketmine/pocketmine-mp 30 org.springframework.security:spring-security-core 30 undici 30 org.apache.solr:solr-core 29 mediawiki/core 28 phpoffice/phpspreadsheet 28 Pillow 28 pnpm 28 github.com/nats-io/nats-server/v2 27 github.com/fleetdm/fleet/v4 27 @anthropic-ai/claude-code 27 centreon/centreon 27 pgadmin4 26 zebrad 26 org.keycloak:keycloak-parent 26 cockpit-hq/cockpit 26 github.com/openbao/openbao 26 openmage/magento-lts 26 github.com/ethereum/go-ethereum 26 github.com/openfga/openfga 26 org.eclipse.jetty:jetty-server 26 funadmin/funadmin 26 dompurify 26 openssl-src 25 laravel/framework 25 grumpydictator/firefly-iii 25 org.apache.openmeetings:openmeetings-parent 25 rubygems-update 25 litellm 25 ghost 25 typo3/cms-backend 24 openbabel 24 Microsoft.AspNetCore.App.Runtime.win-x64 24 github.com/traefik/traefik 24 twig/twig 24 org.xwiki.platform:xwiki-platform-web-templates 23 activerecord 23 simplesamlphp/simplesamlphp 23 puppet 23 remdex/livehelperchat 23 magento/core 23 org.bouncycastle:bcprov-jdk14 23 github.com/goharbor/harbor 23 glance 22 ethyca-fides 22 vite 22 zendframework/zendframework 22

Filter by Repository

https://github.com/tensorflow/tensorflow 433 https://github.com/moodle/moodle 250 https://github.com/xwiki/xwiki-platform 222 https://github.com/chakra-core/ChakraCore 214 https://github.com/jenkinsci/jenkins 178 https://github.com/liferay/liferay-portal 170 https://github.com/django/django 121 https://github.com/apache/tomcat 118 https://github.com/jquery/jquery 118 https://github.com/pimcore/pimcore 116 https://github.com/apache/airflow 105 https://github.com/TYPO3/typo3 93 https://github.com/microweber/microweber 90 https://github.com/keycloak/keycloak 90 https://github.com/librenms/librenms 77 https://github.com/FasterXML/jackson-databind 70 https://github.com/rails/rails 70 https://github.com/thorsten/phpmyfaq 69 https://github.com/silverstripe/silverstripe-framework 68 https://github.com/usememos/memos 68 https://github.com/kubernetes/kubernetes 66 https://github.com/symfony/symfony 64 https://github.com/Dolibarr/dolibarr 60 https://github.com/ansible/ansible 59 https://github.com/mattermost/mattermost 59 https://github.com/python-pillow/Pillow 52 https://github.com/spring-projects/spring-framework 51 https://github.com/argoproj/argo-cd 50 https://github.com/apache/struts 47 https://github.com/grafana/grafana 47 https://github.com/mautic/mautic 46 https://github.com/rancher/rancher 46 https://github.com/phpmyadmin/phpmyadmin 45 https://github.com/concretecms/concretecms 44 https://github.com/vyperlang/vyper 44 https://github.com/shopware/platform 42 https://github.com/ikus060/rdiffweb 42 https://github.com/mantisbt/mantisbt 42 https://github.com/saltstack/salt 42 https://github.com/directus/directus 41 https://github.com/craftcms/cms 41 https://github.com/shopware/shopware 40 https://github.com/star7th/showdoc 39 https://github.com/mmaitre314/picklescan 39 https://github.com/magento/magento2 38 https://github.com/dotnet/runtime 38 https://github.com/openstack/nova 38 https://github.com/gradio-app/gradio 38 https://github.com/plone/Products.CMFPlone 37 https://github.com/x-stream/xstream 37 https://github.com/mlflow/mlflow 36 https://github.com/octobercms/october 36 https://github.com/umbraco/Umbraco-CMS 35 https://github.com/sparklemotion/nokogiri 35 https://github.com/parse-community/parse-server 34 https://github.com/answerdev/answer 34 https://github.com/apache/activemq 34 https://github.com/matrix-org/synapse 32 https://github.com/go-gitea/gitea 32 https://github.com/opencv/opencv 32 https://github.com/PaddlePaddle/Paddle 31 https://github.com/cilium/cilium 31 https://github.com/apache/inlong 31 https://github.com/contao/contao 30 https://github.com/snipe/snipe-it 30 https://github.com/rack/rack 29 https://github.com/erlang/otp 29 https://github.com/FlowiseAI/Flowise 28 https://github.com/CVEProject/cvelist 28 https://github.com/electron/electron 28 https://github.com/openstack/keystone 28 https://github.com/gogs/gogs 28 https://github.com/strapi/strapi 28 https://github.com/netty/netty 27 https://github.com/zitadel/zitadel 26 https://github.com/geoserver/geoserver 26 https://github.com/baserproject/basercms 26 https://github.com/froxlor/froxlor 26 https://github.com/apache/nifi 26 https://github.com/github/advisory-database 26 https://github.com/surrealdb/surrealdb 25 https://github.com/bcgit/bc-java 25 https://github.com/vercel/next.js 25 https://github.com/traefik/traefik 25 https://github.com/denoland/deno 25 https://github.com/langchain-ai/langchain 25 https://github.com/vllm-project/vllm 25 https://github.com/pmmp/PocketMine-MP 25 https://github.com/apache/cxf 24 https://github.com/getgrav/grav 24 https://github.com/hashicorp/consul 24 https://github.com/pyload/pyload 24 https://github.com/run-llama/llama_index 24 https://github.com/TYPO3/TYPO3.CMS 23 https://github.com/firefly-iii/firefly-iii 23 https://github.com/bytecodealliance/wasmtime 23 https://github.com/PrestaShop/PrestaShop 23 https://github.com/moby/moby 23 https://github.com/nilsteampassnet/TeamPass 23 https://github.com/eclipse/jetty.project 23 https://github.com/dnnsoftware/Dnn.Platform 23 https://github.com/livehelperchat/livehelperchat 23 https://github.com/Perl/perl5 22 https://github.com/nervosnetwork/ckb 22 https://github.com/helm/helm 22 https://github.com/getkirby/kirby 22 https://github.com/jenkinsci/script-security-plugin 22 https://github.com/PHPOffice/PhpSpreadsheet 22 https://github.com/hashicorp/vault 21 https://github.com/undertow-io/undertow 21 https://github.com/laravel/framework 21 https://github.com/OpenZeppelin/openzeppelin-contracts 21 https://github.com/goharbor/harbor 21 https://github.com/funadmin/funadmin 20 https://github.com/OpenNMS/opennms 20 https://github.com/jeecgboot/jeecg-boot 20 https://github.com/ethyca/fides 20 https://github.com/opencast/opencast 20 https://github.com/huggingface/transformers 19 https://github.com/TYPO3-CMS/core 19 https://github.com/simplesamlphp/simplesamlphp 19 https://github.com/intelliants/subrion 19 https://github.com/alkacon/opencms-core 19 https://github.com/containerd/containerd 19 https://github.com/backstage/backstage 19 https://github.com/cloudfoundry/uaa 19 https://github.com/nilsteampassnet/teampass 19 https://github.com/OpenMage/magento-lts 18 https://github.com/opencontainers/runc 18 https://github.com/rubygems/rubygems 18 https://github.com/apache/camel 18 https://github.com/vaadin/platform 18 https://github.com/vantage6/vantage6 17 https://github.com/openfga/openfga 17 https://github.com/mindsdb/mindsdb 17 https://github.com/apache/kylin 17 https://github.com/liufee/cms 17 https://github.com/ethereum/go-ethereum 17 https://github.com/forkcms/forkcms 16 https://github.com/sequelize/sequelize 16 https://github.com/vitejs/vite 16 https://github.com/yetiforcecompany/yetiforcecrm 16 https://github.com/quarkusio/quarkus 16 https://github.com/dotnet/aspnetcore 16 https://github.com/hashicorp/nomad 16 https://github.com/tinymce/tinymce 16 https://github.com/rusqlite/rusqlite 16 https://github.com/twbs/bootstrap 16 https://github.com/pyca/cryptography 16 https://github.com/etcd-io/etcd 16 https://github.com/cobbler/cobbler 15 https://github.com/thorsten/phpMyFAQ 15 https://github.com/xuxueli/xxl-job 15 https://github.com/ckeditor/ckeditor4 15 https://github.com/nodejs/undici 15 https://github.com/spring-projects/spring-security 15 https://github.com/centreon/centreon 15 https://github.com/drupal/core 15 https://github.com/puppetlabs/puppet 15 https://github.com/PHPMailer/PHPMailer 15 https://github.com/zendframework/zendframework 15 https://github.com/aio-libs/aiohttp 15 https://github.com/MobSF/Mobile-Security-Framework-MobSF 15 https://github.com/containers/podman 15 https://github.com/decidim/decidim 15 https://github.com/OPCFoundation/UA-.NETStandard 15 https://github.com/sqlite/sqlite 15 https://github.com/dompdf/dompdf 15 https://github.com/golang/go 14 https://github.com/ImageMagick/ImageMagick 14 https://github.com/urllib3/urllib3 14 https://github.com/Graylog2/graylog2-server 14 https://github.com/publify/publify 14 https://github.com/apache/zeppelin 14 https://github.com/cosmos/cosmos-sdk 14 https://github.com/ming-soft/MCMS 14 https://github.com/pgadmin-org/pgadmin4 14 https://github.com/twisted/twisted 14 https://github.com/pimcore/admin-ui-classic-bundle 14 https://github.com/rails/rails-html-sanitizer 14 https://github.com/dpgaspar/Flask-AppBuilder 14 https://github.com/cockpit-hq/cockpit 14 https://github.com/janeczku/calibre-web 14 https://github.com/apache/superset 14 https://github.com/TryGhost/Ghost 14 https://github.com/1Panel-dev/1Panel 13 https://github.com/laurent22/joplin 13 https://github.com/OpenRefine/OpenRefine 13 https://github.com/OctoPrint/OctoPrint 13 https://github.com/modoboa/modoboa 13 https://github.com/openbao/openbao 13 https://github.com/h2oai/h2o-3 13 https://github.com/apache/dolphinscheduler 13 https://sourceforge.net/projects/sourceforge.net 13 https://github.com/dromara/hutool 13 https://github.com/zenml-io/zenml 13 https://github.com/swagger-api/swagger-ui 13 https://github.com/centreon/centreon-archived 12 https://github.com/n8n-io/n8n 12