CVE-2026-59920

Netty CVE-2026-59920 concerns the STOMP framing path: the STOMP encoder StompSubframeEncoder intentionally does not escape header values for CONNECT and CONNECTED frames, allowing raw newline characters to be written to the wire. This creates a header-injection risk, because a header value contai...

CVE-2026-59920 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...