Vulnerabilidades en netty
103 resultadosCVE-2025-29908MEDIUMNetty QUIC hash collision DoS attackEPSS 0.6%CVE-2026-44248MEDIUMNetty: Resource exhaustion in MqttDecoderEPSS 0.6%CVE-2026-54251HIGHnetty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of ServiceEPSS 0.5%CVE-2026-116541HIGHnetty-tcnative before 2.0.84.Final Denial of Service via BIO Write OvercountEPSS 0.5%CVE-2026-50010HIGHNetty's wrapping plain trust manager silently disables hostname verificationEPSS 0.5%CVE-2026-56818MEDIUMNetty: RedisArrayAggregator max-elements failure leaves retained partial aggregate stateEPSS 0.5%CVE-2026-59921MEDIUMNetty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoderEPSS 0.5%CVE-2026-44890HIGHNetty has Unbounded Direct Memory Consumption in its RedisDecoderEPSS 0.5%CVE-2026-42583HIGHNetty: Lz4FrameDecoder resource exhaustionEPSS 0.5%CVE-2026-44250HIGHNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested ArraysEPSS 0.5%CVE-2026-50011HIGHNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array lengthEPSS 0.5%CVE-2026-59901HIGHNetty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread HangEPSS 0.5%CVE-2026-116540HIGHnetty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket CallbackEPSS 0.5%CVE-2026-100660HIGHNetty before 4.2.18.Final QpackEncoder Unbounded Memory RetentionEPSS 0.5%CVE-2026-59898MEDIUMNetty: WebSockets V07/V08 handshaker missing Connection/Upgrade validationEPSS 0.4%CVE-2026-42582HIGHNetty: HTTP/3 QPACK literal unbounded allocationEPSS 0.4%CVE-2026-100662HIGHNetty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoSEPSS 0.4%CVE-2026-59920MEDIUMNetty: STOMP CONNECT Frame Header InjectionEPSS 0.4%CVE-2024-47535MEDIUMDenial of Service attack on windows app using NettyEPSS 0.4%CVE-2026-56746MEDIUMNetty has a Security Control Bypass via CORS Short-Circuit FailureEPSS 0.4%