Vendor
Io.netty
8 known vulnerabilities in products by Io.netty, 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-42587 | Netty: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Critical | CVE-2026-42584 | Netty: HttpClientCodec response desynchronization | 9.1 | |
| High | CVE-2026-44248 | Netty: Resource exhaustion in MqttDecoder | 7.5 | |
| High | CVE-2026-42583 | Netty: Lz4FrameDecoder resource exhaustion | 7.5 | |
| High | CVE-2026-42582 | Netty: HTTP/3 QPACK literal unbounded allocation | 7.5 | |
| Medium | CVE-2026-42580 | Netty: HTTP Request Smuggling due to incorrect chunk size parsing | 6.5 | |
| High | CVE-2026-42585 | Netty: HTTP Request Smuggling due to malformed Transfer-Encoding | 7.5 | |
| High | CVE-2026-42586 | Netty: CRLF Injection in Netty Redis Codec Encoder | 7.1 |
Products
| Netty-codec-http | 4 | 0 |