Netty vulnerabilities
103 CVEs and advisories name Netty as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-24970SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine
- CVE-2024-47535Denial of Service attack on windows app using Netty
- CVE-2024-40642Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp
- CVE-2024-36121 netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces
- CVE-2024-29025Netty HttpPostRequestDecoder can OOM
- CVE-2023-34462netty-handler SniHandler 16MB allocation
- CVE-2022-41915Netty project is an event-driven asynchronous network application framework.
- CVE-2022-41881Netty project is an event-driven asynchronous network application framework.
- CVE-2022-24823Local Information Disclosure Vulnerability in io.netty:netty-codec-http
- CVE-2021-43797HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
- CVE-2021-21409Possible request smuggling in HTTP/2 due missing validation of content-length
- CVE-2021-21295Possible request smuggling in HTTP/2 due missing validation
- CVE-2021-21290Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files