Product by Io.netty

    Netty-codec-http

    4 known vulnerabilities in Netty-codec-http (Io.netty), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Netty-codec-http (Io.netty)
    HighCVE-2026-42587

    Netty: Allocation of Resources Without Limits or Throttling

    also in 8 other products

    		7.5
    CriticalCVE-2026-42584

    Netty: HttpClientCodec response desynchronization

    also in 1 other product

    		9.1
    MediumCVE-2026-42580

    Netty: HTTP Request Smuggling due to incorrect chunk size parsing

    also in 1 other product

    		6.5
    HighCVE-2026-42585

    Netty: HTTP Request Smuggling due to malformed Transfer-Encoding

    also in 1 other product

    		7.5

    All products by Io.netty