Medium
CVE-2026-44248
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 92
Reset filters
High
CVE-2026-42587
Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS
Medium
CVE-2026-42586
Netty Redis Codec Encoder has a CRLF Injection Issue
Medium
CVE-2026-42585
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
High
CVE-2026-42584
Netty has HttpClientCodec response desynchronization
High
CVE-2026-42583
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
High
CVE-2026-42582
Netty HTTP/3 QPACK literal unbounded allocation
Medium
CVE-2026-42581
Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Medium
CVE-2026-42580
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
High
CVE-2026-42579
Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)
Low
CVE-2026-42578
Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)
High
CVE-2026-42577
Netty epoll transport denial of service via RST on half-closed TCP connection
Medium
CVE-2026-41417
Netty: Start-Line Injection in DefaultHttpRequest.setUri() Allows HTTP Request Smuggling and RTSP Request Injection
High
CVE-2026-33871
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
High
CVE-2026-33870
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Medium
CVE-2025-67735
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
High
CVE-2025-59419
Netty has SMTP Command Injection Vulnerability that Allows Email Forgery
Low
CVE-2025-58056
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions
Medium
CVE-2025-58057
Netty's decoders vulnerable to DoS via zip bomb style attack
High
CVE-2025-55163
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Medium
CVE-2025-25193
Denial of Service attack on windows app using Netty
High
CVE-2025-24970
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
Medium
CVE-2024-47535
Denial of Service attack on windows app using netty
Medium
CVE-2024-29025
Netty's HttpPostRequestDecoder can OOM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.