Product by Netty
Netty netty-incubator-codec-ohttp
6 known vulnerabilities in Netty netty-incubator-codec-ohttp (Netty), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-54251 | Netty netty-incubator-codec-ohttp: Improper Control of a Resource Through its Lifetime | — | |
| High | CVE-2024-40642 | Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp | 8.1 | |
| Critical | CVE-2026-48040 | Netty netty-incubator-codec-ohttp: Out-of-bounds Read | 9.1 | |
| Medium | CVE-2026-41207 | netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures | 5.3 | |
| Medium | CVE-2026-48480 | OHttpVersionChunkDraft: Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation | — | |
| Critical | CVE-2024-36121 | netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces | 5.9 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,