CVE-2026-100661

creationtimestamp| type| source ---|---|--- 2026-09-27 02:17:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mwhqai6uhj27...

CVE-2026-100661

Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.0.Final through 4.2.17.Final contain a denial-of-service vulnerability in the QPACK prefixed-integer decoder QpackUtil.decodePrefixedInteger, which does not bound the number of continuation bytes it will process. A remote, unauthenticat...