HTTP Request Smuggling io.netty:netty-codec-http Dependency in Bamboo Data Center

🗓️ 01 Jun 2026 22:30:16Reported by security-metrics-botType

atlassian

atlassian🔗 jira.atlassian.com👁 2 Views

High severity web request smuggling in Bamboo Data Center; upgrade to version 12.1.8 or 10.2.20.

Reporter	Title	Published	Views	Family All 121
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http	19 May 202619:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect for Manufacturing is vulnerable to multiple vulnerabilities due to Netty	21 May 202616:11	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Netty, IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities	11 Jun 202607:12	–	ibm
Chainguard	CVE-2026-42585 vulnerabilities	8 May 202601:17	–	cgr
Circl	CVE-2026-42585	5 May 202618:09	–	circl
CNNVD	Netty 环境问题漏洞	13 May 202600:00	–	cnnvd
Atlassian	HTTP Request Smuggling io.netty:netty-codec-http Dependency in Confluence Data Center	2 Jun 202616:30	–	atlassian
Atlassian	HTTP Request Smuggling io.netty:netty-codec-http Dependency in Crowd Data Center	11 Jun 202617:31	–	atlassian
Atlassian	HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Service Management Data Center	3 Jun 202616:30	–	atlassian
Atlassian	HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Data Center	21 May 202619:29	–	atlassian

Vulners

Node

atlassian bamboo_data_centerMatch10.0.0

OR

atlassian bamboo_data_centerMatch10.1.0

OR

atlassian bamboo_data_centerMatch10.0.2

OR

atlassian bamboo_data_centerMatch10.0.3

OR

atlassian bamboo_data_centerMatch10.2.0

OR

atlassian bamboo_data_centerMatch10.1.1

OR

atlassian bamboo_data_centerMatch11.0.0

OR

atlassian bamboo_data_centerMatch10.2.1

OR

atlassian bamboo_data_centerMatch10.2.2

OR

atlassian bamboo_data_centerMatch10.2.3

OR

atlassian bamboo_data_centerMatch12.0.0

OR

atlassian bamboo_data_centerMatch10.2.4

OR

atlassian bamboo_data_centerMatch11.0.1

OR

atlassian bamboo_data_centerMatch10.2.5

OR

atlassian bamboo_data_centerMatch11.0.2

OR

atlassian bamboo_data_centerMatch11.0.3

OR

atlassian bamboo_data_centerMatch10.2.6

OR

atlassian bamboo_data_centerMatch10.2.7

OR

atlassian bamboo_data_centerMatch11.0.4

OR

atlassian bamboo_data_centerMatch12.1.0

OR

atlassian bamboo_data_centerMatch10.2.8

OR

atlassian bamboo_data_centerMatch11.0.5

OR

atlassian bamboo_data_centerMatch10.2.9

OR

atlassian bamboo_data_centerMatch11.0.7

OR

atlassian bamboo_data_centerMatch11.0.8

OR

atlassian bamboo_data_centerMatch10.2.10

OR

atlassian bamboo_data_centerMatch10.2.11

OR

atlassian bamboo_data_centerMatch10.2.12

OR

atlassian bamboo_data_centerMatch10.2.13

OR

atlassian bamboo_data_centerMatch10.2.14

OR

atlassian bamboo_data_centerMatch10.2.15

OR

atlassian bamboo_data_centerMatch12.1.2

OR

atlassian bamboo_data_centerMatch12.1.3

OR

atlassian bamboo_data_centerMatch10.2.16

OR

atlassian bamboo_data_centerMatch10.2.18

OR

atlassian bamboo_data_centerMatch11.1.0

OR

atlassian bamboo_data_centerMatch12.1.6

OR

atlassian bamboo_data_centerMatch12.1.7

OR

atlassian bamboo_data_centerMatch10.2.19

OR

atlassian bamboo_data_centerMatch10.2.17

OR

atlassian bamboo_data_centerMatch12.1.8

OR

atlassian bamboo_data_centerMatch10.2.20

16 Jun 2026 17:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5 - 7.5

EPSS0.00239

SSVC

web request smuggling bamboo data center netty codec http unauthenticated access upgrade guidance