5 matches found
DEBIAN-CVE-2026-59899
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-59899
CVE-2026-59899 (Netty) affects Netty versions prior to 4.1.136.Final and 4.2.16.Final, where HttpContentEncoder maintains an unbounded per-channel acceptEncodingQueue that can accumulate attacker-controlled data. The queue is filled on the I/O thread per inbound HTTP request and drained only when...
CVE-2026-59899
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-59899 vulnerabilities
Vulnerabilities for packages: camunda, infinispan, traccar-fips, management-api-for-apache-cassandra-5.0, apicurio-registry-fips, s3proxy, airbyte-server, pinot-fips, nuxeo, akhq, kafbat-ui, keycloak, reposilite, s3proxy-fips, apache-hop, apache-pulsar-fips, traccar, knative-kafka-broker,...
