CVE-2026-44248 Netty: Resource exhaustion in MqttDecoder

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section is parsed and buffered before any message size limit is applied. Specifically, in MqttDecoder, the decodeVariableHeader method is called before the...

CVE-2026-44248 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, tez, druid, trino, thingsboard, celeborn, management-api-for-apache-cassandra-5.0...