Netty vulnerabilities
103 CVEs and advisories name Netty as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-56822Netty: TOCTOU in OcspServerCertificateValidator
- CVE-2026-56821Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator
- CVE-2026-59921Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder
- CVE-2026-56820Netty: Missing CertificateID Validation in OCSP Response Allows Replay Attacks
- CVE-2026-56819Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)
- CVE-2026-56817Netty: XML External Entity (XXE) injection via unconfigured XML factory when DTD and entity processing are enabled
- CVE-2026-56816Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types
- CVE-2026-56746Netty has a Security Control Bypass via CORS Short-Circuit Failure
- CVE-2026-56745Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
- CVE-2026-55851Netty codec-haproxy: Signed-Byte Sentinel Collision in HAProxyMessageDecoder Leads to Unbounded Memory Exhaustion
- CVE-2026-55833Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
- CVE-2026-55831Netty SPDY SETTINGS frame count materializes unbounded settings map
- CVE-2026-44891Netty: Denial of Service via Unbounded Headers in StompSubframeDecoder
- CVE-2026-50560Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
- CVE-2026-50020Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
- CVE-2026-50011Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length
- CVE-2026-50010Netty's wrapping plain trust manager silently disables hostname verification
- CVE-2026-50009Netty QUIC stateless reset token material exposed through header-visible connection IDs
- CVE-2026-48748Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion
- CVE-2026-48059Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
- CVE-2026-48043netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
- CVE-2026-48006Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
- CVE-2026-47691Netty has Insufficient Bailiwick Validation for NS Records
- CVE-2026-47244Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
- CVE-2026-46340Netty: SCTP reassembly nests buffers without bound
- CVE-2026-45674Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
- CVE-2026-45673Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
- CVE-2026-45536Netty: Unix-socket fd receive leaks descriptors when peer sends two at once
- CVE-2026-45416Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
- CVE-2026-44894Netty's Default QUIC token handler accepts any client-supplied token