netty Vulnerability Advisory Catalog

Total 71 security vulnerabilities recorded for netty software and firmware.

← Back to All Vendors
Component: netty

Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15....

📅 2026-06-11
CVSS 8.1 Dossier →
CVE-2026-48040 CRITICAL
Component: netty-incubator-codec-ohttp

The netty incubator codec.bhttp is a java language binary http parser. The library implements Oblivious HTTP (RFC 9458) using BoringSSL's HPKE C libra...

📅 2026-06-04
CVSS 9.1 Dossier →
Component: netty-incubator-codec-ohttp

The netty incubator codec.bhttp is a java language binary http parser. Prior to version 0.0.21.Final, HKDF_expand returns non-NULL on failure. The byt...

📅 2026-06-04
CVSS 5.3 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section is...

📅 2026-05-13
CVSS 5.3 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAl...

📅 2026-05-13
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEnc...

📅 2026-05-13
CVSS 6.8 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty incorrectly parses malformed Tran...

📅 2026-05-13
CVSS 6.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound resp...

📅 2026-05-13
CVSS 7.3 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of ...

📅 2026-05-13
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final, when decoding header blocks, the non-Huffman branch of io...

📅 2026-05-13
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpObjectDecoder strips a conflicting ...

📅 2026-05-13
CVSS 5.8 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's chunk size parser silently over...

📅 2026-05-13
CVSS 6.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's DNS codec does not enforce RFC ...

📅 2026-05-13
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTT...

📅 2026-05-13
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fails to detect and c...

📅 2026-05-13
CVSS 7.5 Dossier →
Component: netty

Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later chan...

📅 2026-05-06
CVSS 5.3 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, a remote user can trigger a...

📅 2026-03-27
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses qu...

📅 2026-03-27
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec....

📅 2025-12-16
CVSS 6.5 Dossier →
Component: netty

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients....

📅 2025-09-04
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In ...

📅 2025-09-03
CVSS 7.5 Dossier →
Component: netty

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouR...

📅 2025-08-13
CVSS 7.5 Dossier →
Component: netty

Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe readi...

📅 2025-02-10
CVSS 5.5 Dossier →
Component: netty

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118....

📅 2025-02-10
CVSS 7.5 Dossier →
Page 2 of 3 (71 Total Records)