io.netty:netty-codec-http2
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.
Security Advisories for io.netty:netty-codec-http2 in maven
High
11 days ago
Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
maven
io.netty:netty-codec-http2
Moderate
20 days ago
Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass
maven
io.netty:netty-codec-http2
Moderate
about 2 months ago
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
maven
io.netty:netty-codec-http2
Moderate
2 months ago
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
maven
io.netty:netty-codec-http2
Moderate
2 months ago
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
maven
io.netty:netty-codec-http2
High
3 months ago
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
maven
io.netty:netty-codec-http2, io.netty:netty-codec-http
High
5 months ago
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
maven
io.netty:netty-codec-http2
Potential
High
10 months ago
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
maven
io.netty:netty-codec-smtp
Potential
Low
11 months ago
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions
maven
io.netty:netty-codec-http
Potential
Moderate
11 months ago
Netty's decoders vulnerable to DoS via zip bomb style attack
maven
io.netty:netty-codec, io.netty:netty-codec-compression
High
12 months ago
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
maven
io.netty:netty-codec-http2
Potential
Moderate
over 1 year ago
Denial of Service attack on windows app using Netty
maven
io.netty:netty-common
Potential
High
over 1 year ago
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
maven
io.netty:netty-handler
Potential
Moderate
over 1 year ago
Denial of Service attack on windows app using netty
maven
io.netty:netty-common
High
almost 3 years ago
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
maven
io.netty:netty-codec-http2
Potential
Potential
Moderate
over 3 years ago
Netty vulnerable to HTTP Response splitting from assigning header value iterator
maven
io.netty:netty-codec-http
Potential
Moderate
over 3 years ago
HAProxyMessageDecoder Stack Exhaustion DoS
maven
io.netty:netty-codec-haproxy
Potential
Potential
Moderate
over 4 years ago
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
maven
io.netty:netty-codec-http
Moderate
over 5 years ago
Possible request smuggling in HTTP/2 due missing validation of content-length
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http2
Moderate
over 5 years ago
Possible request smuggling in HTTP/2 due missing validation
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-codec-http2
Potential
High
almost 7 years ago
HTTP Request Smuggling in Netty
maven
io.netty:netty, org.jboss.netty:netty, io.netty:netty-all