io.netty:netty-codec-http
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
Security Advisories for io.netty:netty-codec-http in maven
Moderate
18 days ago
Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
maven
io.netty:netty-codec-http
Moderate
18 days ago
Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
maven
io.netty:netty-codec-http
Moderate
18 days ago
Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation
maven
io.netty:netty-codec-http
Moderate
18 days ago
Netty: Security Control Bypass via CORS Short-Circuit Failure
maven
io.netty:netty-codec-http
High
18 days ago
Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
maven
io.netty:netty-codec-http
High
18 days ago
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
maven
io.netty:netty-codec-http
High
18 days ago
Netty SPDY SETTINGS frame count materializes unbounded settings map
maven
io.netty:netty-codec-http
Moderate
about 2 months ago
Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
maven
io.netty:netty-codec-http
High
3 months ago
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
maven
io.netty:netty-codec-http2, io.netty:netty-codec-http
Moderate
3 months ago
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
maven
io.netty:netty-codec-http
High
3 months ago
Netty has HttpClientCodec response desynchronization
maven
io.netty:netty-codec-http
Moderate
3 months ago
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
maven
io.netty:netty-codec-http
Moderate
3 months ago
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
maven
io.netty:netty-codec-http
Moderate
3 months ago
Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection
maven
io.netty:netty-codec-http
High
5 months ago
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
maven
io.netty:netty-codec-http
Moderate
8 months ago
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
maven
io.netty:netty-codec-http
Potential
High
10 months ago
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
maven
io.netty:netty-codec-smtp
Low
11 months ago
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions
maven
io.netty:netty-codec-http
Potential
Moderate
11 months ago
Netty's decoders vulnerable to DoS via zip bomb style attack
maven
io.netty:netty-codec, io.netty:netty-codec-compression
Potential
High
12 months ago
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
maven
io.netty:netty-codec-http2
Potential
Moderate
over 1 year ago
Denial of Service attack on windows app using Netty
maven
io.netty:netty-common
Potential
High
over 1 year ago
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
maven
io.netty:netty-handler
Potential
Moderate
over 1 year ago
Denial of Service attack on windows app using netty
maven
io.netty:netty-common
Potential
Moderate
over 3 years ago
Netty vulnerable to HTTP Response splitting from assigning header value iterator
maven
io.netty:netty-codec-http
Potential
Moderate
over 3 years ago
HAProxyMessageDecoder Stack Exhaustion DoS
maven
io.netty:netty-codec-haproxy
Potential
Moderate
about 4 years ago
Netty denial of service vulnerability
maven
io.netty:netty-all, io.netty:netty
Potential
Moderate
over 4 years ago
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
maven
io.netty:netty-codec-http
Moderate
over 4 years ago
HTTP request smuggling in netty
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http
Potential
High
almost 5 years ago
SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec
Potential
High
almost 5 years ago
Bzip2Decoder doesn't allow setting size restrictions for decompressed data
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec
Potential
Moderate
over 5 years ago
Possible request smuggling in HTTP/2 due missing validation of content-length
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http2
Potential
Moderate
over 5 years ago
Possible request smuggling in HTTP/2 due missing validation
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http2
Moderate
over 5 years ago
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http
Potential
Potential
High
about 6 years ago
Information Exposure in Netty
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-parent
Potential
Potential
Critical
over 6 years ago
HTTP Request Smuggling in Netty
maven
io.netty:netty, org.jboss.netty:netty
Potential
High
almost 7 years ago
HTTP Request Smuggling in Netty
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-all