Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 92
Restablecer filtrosNetty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
Netty Redis Codec Encoder has a CRLF Injection Issue
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
Netty has HttpClientCodec response desynchronization
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
Netty HTTP/3 QPACK literal unbounded allocation
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
Netty epoll transport denial of service via RST on half-closed TCP connection
Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions
Netty's decoders vulnerable to DoS via zip bomb style attack
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Denial of Service attack on windows app using Netty
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Denial of Service attack on windows app using netty
Netty's HttpPostRequestDecoder can OOM
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.