5957 matches found
ROOT-APP-MAVEN-CVE-2026-44249 CVE-2026-44249 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-44249 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-50010 CVE-2026-50010 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-50010 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-45416 CVE-2026-45416 in io.netty:netty-handler - Patched by Root
Root has patched CVE-2026-45416 in the io.netty:netty-handler package for Root:Maven. Multiple fixed versions available...
CVE-2022-22947
CVE-2022-22947 Memory Shell Injection Supports injection of three types of memory shells Usage: usage -t -u Options: -h, --help show this help message and exit -t TYPE switch one : spring, netty, godzilla -u URL url Taking Godzilla shell injection as an example python3 -t godzilla -u...
netty-resolver-dns-check
netty-resolver-dns-check Offline checker for three DNS cache poisoning CVEs in io.netty:netty-resolver-dns — CVE-2026-45674 , CVE-2026-47691 and CVE-2026-45673 — and for the question the version number cannot answer: is your application actually using that resolver? If you use Spring WebClient, t...
CVE-2026-80343
CVE-2026-80343 — camel-netty-http: security-constraint case-sensitivity bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-netty-http security constraint compared the request path against the configured context path using a case-sensitive match, while t...
netty-http-check
netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...
GravitLauncher LaunchServer <=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read
LaunchServer's Netty FileServerHandler computes the served path by stripping one leading character on the assumption that every request-target begins with '/'. Netty's HttpServerCodec accepts a request-target without a leading slash verbatim, so a request without a leading slash bypasses path...
netty-http2-check
netty-http2-check Offline checker for the 7io.netty:netty-codec-http2 CVEs. Tells you which ones you are actually exposed to — and the single version that fixes all of them: 4.1.136.Final / 4.2.16.Final, a number that appears on none of the seven advisories. CVE-2025-55163 · CVE-2026-33871 ·...
CLEANSTART-2026-OG34037 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the solr package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-GP48303 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the solr package. Netty is an asynchronous, event-driven network application framework...
mallet
Mallet, a framework for creating proxies Mallet is a tool for creating proxies for arbitrary protocols, along similar lines to the familiar intercepting web proxies, just more generic. It is built upon the Netty framework, and relies heavily on the Netty pipeline concept, which allows the graphic...
spring_cloud_gateway_memshell
CVE-2022-22947 memshell This script is incomplete, for learning purposes only, do not use illegally. Based on c0ny1 senior's blog, this is a learning script that can write netty and spring memory shells. Test environment is vulhub eg:xx.py http://127.0.0.1:8080 netty whoami...
CVE-2026-40859
camel-netty-http / camel-vertx-http HTTP-Response Unsafe Deserialization Reproducer CVE-2026-40859 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-netty-http and camel-vertx-http components, tracked as CVE-2026-40859. When a producer endpoint is configured...
CLEANSTART-2026-GP83393 Netty's HTTP/3 codec (io
Security vulnerability affects the strimzi-kafka-operator package. Netty's HTTP/3 codec io...
CLEANSTART-2026-BD49027 Netty's HTTP/3 codec (io
Security vulnerability affects the strimzi-kafka-operator package. Netty's HTTP/3 codec io...
CLEANSTART-2026-GI23787 flaw was found in Netty
Security vulnerability affects the strimzi-kafka-operator package. A flaw was found in Netty...
CLEANSTART-2026-NP38619 Netty versions 4
Security vulnerability affects the strimzi-kafka-operator package. Netty versions 4...