Vulnerabilities in io.netty
8 resultsCVE-2026-42587HIGHNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSEPSS 0.5%CVE-2026-42582HIGHNetty: HTTP/3 QPACK literal unbounded allocationEPSS 0.4%CVE-2026-42583HIGHNetty: Lz4FrameDecoder resource exhaustionEPSS 0.4%CVE-2026-42584HIGHNetty: HttpClientCodec response desynchronizationEPSS 0.4%CVE-2026-42580MEDIUMNetty: HTTP Request Smuggling due to incorrect chunk size parsingEPSS 0.4%CVE-2026-44248MEDIUMNetty: Resource exhaustion in MqttDecoderEPSS 0.4%CVE-2026-42585MEDIUMNetty: HTTP Request Smuggling due to malformed Transfer-EncodingEPSS 0.2%CVE-2026-42586MEDIUMNetty: CRLF Injection in Netty Redis Codec EncoderEPSS 0.2%