Product by Debian
Netty
21 known vulnerabilities in Netty (Debian), 1 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| Critical | CVE-2019-20445 | Netty: security vulnerability | 9.1 | |
| Critical | CVE-2019-20444 | Netty: security vulnerability | 9.1 | |
| High | CVE-2020-11612 | Netty: security vulnerability | 7.5 | |
| High | CVE-2019-16869 | Netty: security vulnerability | 7.5 | |
| High | CVE-2021-37137 | The Netty project Netty: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-37136 | The Netty project Netty: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2021-21295 | Possible request smuggling in HTTP/2 due missing validation | 5.9 | |
| High | CVE-2020-7238 | Netty: security vulnerability | 7.5 | |
| Medium | CVE-2021-21409 | Possible request smuggling in HTTP/2 due missing validation of content-length | 5.9 | |
| Medium | CVE-2021-43797 | Netty: HTTP Request/Response Smuggling | 6.5 | |
| Medium | CVE-2023-34462 | netty-handler SniHandler 16MB allocation | 6.5 | |
| High | CVE-2025-55163 | Netty MadeYouReset HTTP/2 DDoS Vulnerability | 7.5 | |
| Medium | CVE-2025-59419 | Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery | — | |
| Medium | CVE-2021-21290 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files | 6.2 | |
| High | CVE-2022-41881 | Netty: Uncontrolled Recursion | 5.3 | |
| Medium | CVE-2024-29025 | Netty HttpPostRequestDecoder can OOM | 5.3 | |
| High | CVE-2025-58056 | Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions | 7.5 | |
| High | CVE-2025-58057 | Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack | 7.5 | |
| Medium | CVE-2025-67735 | Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder | 6.5 | |
| Medium | CVE-2022-41915 | Netty: HTTP Request/Response Splitting | 6.5 |