Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.netty:netty-codec-haproxy

5 known vulnerabilities (3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 3 high, 2 medium
Dependents
0
Registry
Maven Central

Advisories 5

  • CVE-2026-59919Medium 5.5

    Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

    Affected: from 4.2.0.Final, fixed in 4.2.16.Final; fixed in 4.1.136.Final.

  • Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion

    Affected: from 4.2.0.Final, fixed in 4.2.16.Final; from 4.1.0.Final, fixed in 4.1.136.Final.

  • Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final; fixed in 4.1.135.Final.

  • Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

    Affected: from 4.2.0.Final, fixed in 4.2.15.Final; fixed in 4.1.135.Final.

  • CVE-2022-41881Medium 5.3

    Netty project is an event-driven asynchronous network application framework.

    Affected: fixed in 4.1.86.Final.