Netty vulnerabilities
103 CVEs and advisories name Netty as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-44893Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
- CVE-2026-44892Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size
- CVE-2026-44890Netty has Unbounded Direct Memory Consumption in its RedisDecoder
- CVE-2026-44250Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
- CVE-2026-44249Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
- CVE-2026-48480netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation
- CVE-2026-48040netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access
- CVE-2026-41207netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures
- CVE-2026-44248Netty: Resource exhaustion in MqttDecoder
- CVE-2026-42587Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS
- CVE-2026-42586Netty: CRLF Injection in Netty Redis Codec Encoder
- CVE-2026-42585Netty: HTTP Request Smuggling due to malformed Transfer-Encoding
- CVE-2026-42584Netty: HttpClientCodec response desynchronization
- CVE-2026-42583Netty: Lz4FrameDecoder resource exhaustion
- CVE-2026-42582Netty: HTTP/3 QPACK literal unbounded allocation
- CVE-2026-42580Netty: HTTP Request Smuggling due to incorrect chunk size parsing
- CVE-2026-42579Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)
- CVE-2026-42577Netty: epoll transport denial of service via RST on half-closed TCP connection
- CVE-2026-42578Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation
- CVE-2026-42581Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
- CVE-2026-41417Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()
- CVE-2026-33871Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
- CVE-2026-33870Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
- CVE-2025-67735Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
- CVE-2025-59419Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery
- CVE-2025-58057Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack
- CVE-2025-58056Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions
- CVE-2025-55163Netty MadeYouReset HTTP/2 DDoS Vulnerability
- CVE-2025-29908Netty QUIC hash collision DoS attack
- CVE-2025-25193Denial of Service attack on windows app using Netty