Product by Spring
Reactor Netty
7 known vulnerabilities in Reactor Netty (Spring), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-34054 | Reactor Netty HTTP Server Metrics DoS Vulnerability | 5.3 | |
| Medium | CVE-2026-47874 | Reactor Netty HTTP Server Denial of Service With Pipelined Requests | 5.3 | |
| Medium | CVE-2026-47848 | Reactor Netty WebSocket Client Leaks Credentials On Redirect | 6.1 | |
| Medium | CVE-2026-47845 | Reactor Netty HTTP Server may incorrectly evaluate proxy addresses | 5.3 | |
| Medium | CVE-2026-47844 | Reactor Netty HTTP Server Leaks Exception Details | 5.3 | |
| Medium | CVE-2026-41715 | Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect | 6.1 | |
| Low | CVE-2026-47843 | Reactor Netty may incorrectly route traffic due to DNS resolver reuse | 3.7 |