CLEANSTART-2026-JI34331 Netty versions 4

CVE-2026-89044 affects multiple packages. Netty versions 4. See references for individual vulnerability details...

CVE-2026-89044

Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by using malformed encoding declarations. Attackers can split Transfer-Encoding...