CVE-2026-59900

Netty CVE-2026-59900 affects the HTTP/2→HTTP/1.x translation in Netty’s HTTP/2-to-HTTP/1.x codec (Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter). When an HTTP/2 client sends both the :authority pseudo-header and a literal Host header in the same HEADERS frame, the translator may...

CVE-2026-28898

swift-nio-http2's HTTP/2-to-HTTP/1.1 codec did not validate pseudo-header values for control characters before placing them into the translated HTTP/1.1 message. swift-nio-http2 1.44.1 adds validation of all pseudo-header values :path, :authority, :scheme, :method, and :status at both the HPACK...

netty: Request smuggling via content-length header

A flaw was found in Netty. There is an issue where the content-length header is not validated correctly if the request uses a single Http2HeaderFrame with the endstream set to true. This flaw leads to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. The...