The vulnerability of the Netty network programming framework, related to deficiencies in HTTP request processing, allows attackers to carry out attacks by replacing HTTP requests with malicious content.

🗓️ 08 Oct 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Netty HTTP request processing vulnerability allows remote attackers to replace requests with malicious content.

Reporter	Title	Published	Views	Family All 219
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Oct 2025	31 Oct 202511:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netty-codec-4.1.124.Final.jar, netty-codec-http-4.1.108.Final.jar, netty-codec-http2-4.1.124.Final.jar affecting MongoDB Enterprised Advanced (CVE-2025-58056, CVE-2025-58057, CVE-2025-67735)	24 Feb 202619:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM DB2 shipped with IBM WebSphere Remote Server	10 Feb 202603:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by a vulnerability in netty-codec, netty-codec-http and netty-codec-http2 (CVE-2025-58056, CVE-2025-58057, CVE-2025-55163)	29 Jan 202615:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	29 Dec 202507:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Processing is affected by multiple Vulnerabilities in IBM Operator for Apache Flink	6 Jan 202600:17	–	ibm
IBM Security Bulletins	Security Bulletin: Netty LF-Only Chunk Terminator Flaw Enables HTTP Request Smuggling (Fixed in 4.1.125/4.2.5)	18 Nov 202517:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Netty affects IBM Netezza Appliance	16 Dec 202511:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics Advanced Certified Containers	14 Nov 202520:49	–	ibm

Vulners

Node

apache nettyRange<4.1.125

apache nettyRange4.2.0–4.2.5

google android_studioMatch2025.2.3.9

Source	Link
github	www.github.com/netty/netty/commit/edb55fd8e0a3bcbd85881e423464f585183d1284
redos	www.redos.red-soft.ru/support/secure/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

10 Feb 2026 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.5

CVSS 27.8

EPSS0.00677