Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.projectreactor.netty:reactor-netty-http

5 known vulnerabilities (1 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 1 high, 4 medium
Registry
Maven Central

Advisories 5

  • CVE-2025-22227Medium 6.1

    CVE-2025-22227: Authentication Leak On Redirect With Reactor Netty HTTP Client

    Affected: from 1.3.0-M1, fixed in 1.3.0-M5; fixed in 1.2.8.

  • In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using…

    Affected: from 1.1.0, fixed in 1.1.13; from 1.0.0, fixed in 1.0.39.

  • CVE-2022-31684Medium 4.3

    Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests.

    Affected: from 1.0.11, fixed in 1.0.24.

  • CVE-2020-5403Medium 6.5

    DoS Via Malformed URL with Reactor Netty HTTP Server

    Affected: from 0.9.3, fixed in 0.9.5.

  • CVE-2020-5404Medium 6.5

    Authentication Leak On Redirect With Reactor Netty HttpClient

    Affected: from 0.9.0, fixed in 0.9.5; from 0.8.0, fixed in 0.8.16.