maven

io.netty:netty-codec-http

24 Total advisories

24 Vulnerabilities

0 Malware

Dependency scanning

Check whether io.netty:netty-codec-http is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

io.netty:netty-codec-http

Vulnerabilities

Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Netty SPDY SETTINGS frame count materializes unbounded settings map

Netty: Security Control Bypass via CORS Short-Circuit Failure

Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation

Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing

Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS

Netty has HttpClientCodec response desynchronization

Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding

Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service

Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation

Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted

Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection

Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder

Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions

Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion

Netty's HttpPostRequestDecoder can OOM

Local Information Disclosure Vulnerability in Netty on Unix-Like systems

HTTP request smuggling in netty

Local Information Disclosure Vulnerability in io.netty:netty-codec-http

Netty vulnerable to HTTP Response splitting from assigning header value iterator

HTTP Request Smuggling in Netty

Browse more Maven advisories

Start Securing