High
CVE-2026-55831
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 92
Reset filters
High
CVE-2026-44891
Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
Medium
CVE-2026-50560
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
Medium
CVE-2026-50020
Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
High
CVE-2026-50011
Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length
High
CVE-2026-50010
Netty: Wrapping plain trust manager silently disables hostname verification
Medium
CVE-2026-50009
Netty: QUIC stateless reset token material exposed through header-visible connection IDs
High
CVE-2026-48748
Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion
High
CVE-2026-48059
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
Medium
CVE-2026-48043
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
High
CVE-2026-48006
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
High
CVE-2026-47691
Netty has Insufficient Bailiwick Validation for NS Records
Medium
CVE-2026-47244
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
High
CVE-2026-46340
Netty: SCTP reassembly nests buffers without bound
High
CVE-2026-45674
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Medium
CVE-2026-45673
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
Medium
CVE-2026-45536
Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
High
CVE-2026-45416
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
High
CVE-2026-44894
Netty's Default QUIC token handler accepts any client-supplied token
High
CVE-2026-44893
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
High
CVE-2026-44892
Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
High
CVE-2026-44890
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
High
CVE-2026-44250
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
High
CVE-2026-44249
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.