CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

308 matches found

Atlassian•added 2026/06/01 10:30 p.m.•31 views

HTTP Request Smuggling io.netty:netty-codec-http Dependency in Bamboo Data Center

This High severity HTTP Request Smuggling vulnerability was introduced in version 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This HTTP Request Smuggling vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N allows ...

7.5CVSS6.9AI score0.00267EPSS

SaveExploits1

Atlassian•added 2026/05/21 7:29 p.m.•33 views

HTTP Request Smuggling io.netty:netty-codec-http Dependency in Jira Data Center

This High severity HTTP Request Smuggling vulnerability was introduced in versions 9.12.1, 9.16.0, 9.17.0, 10.0.0, 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center and Server. This HTTP Request Smuggling vulnerability, with a...

7.5CVSS6.8AI score0.00267EPSS

SaveExploits1

IBM Security Bulletins•added 2026/05/19 7:23 p.m.•31 views

Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of netty-codec-http

Summary Due to use of netty-codec-http, DevOps Test Performance and Rational Performance Tester contain potential resource exhaustion and denial-of-service DoS vulnerabilities Vulnerability Details CVEID:CVE-2025-58057 DESCRIPTION: Netty is an asynchronous event-driven network application framewo...

7.5CVSS6.6AI score0.00631EPSS

SaveExploits2Affected Software1

vulnersOsv•added 2026/05/13 6:10 p.m.•5 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42584 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-42584 Source advisory: MEND:CVE-2026-42584...

9.1CVSS7AI score0.00838EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 6:10 p.m.•5 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43455 more potentially affected by CVE-2026-42584 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

9.1CVSS7AI score0.00838EPSS

SaveExploits1

vulnersOsv•added 2026/05/13 5:54 p.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

9.8CVSS6.9AI score0.0063EPSS

SaveExploits1

IBM Security Bulletins•added 2026/05/12 5:31 p.m.•25 views

Security Bulletin: DevOps Test Performance contains a vulnerability related to use of netty-codec-http

Summary Due to use of netty-codec-http, DevOps Test Performance and Rational Performance Tester contain a potential CRLF injection vulnerability. Vulnerability Details CVEID:CVE-2026-41417 DESCRIPTION: Netty allows request-line validation to be bypassed when a DefaultHttpRequest or...

5.3CVSS6.4AI score0.00318EPSS

SaveExploits1Affected Software1

vulnersOsv•added 2026/05/07 12:22 a.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-42585 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

7.5CVSS7AI score0.00267EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:22 a.m.•5 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43455 more potentially affected by CVE-2026-42585 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

7.5CVSS7AI score0.00267EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:22 a.m.•5 views

7.5CVSS7AI score0.00267EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:18 a.m.•5 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43455 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

9.8CVSS6.9AI score0.0063EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•5 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43455 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

6.5CVSS7AI score0.00378EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•6 views

6.5CVSS7AI score0.00378EPSS

SaveExploits1

Snyk•added 2026/05/05 6:27 p.m.•15 views

HTTP Request Smuggling

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to HTTP Request Smuggling in the setUri function. An attacker can inject arbitrary CRLF sequenc...

6.5CVSS6.3AI score0.00318EPSS

SaveExploits1References3

vulnersOsv•added 2026/05/05 6:27 p.m.•5 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43455 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

5.3CVSS6.5AI score0.00318EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•5 views

5.3CVSS6.5AI score0.00318EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•5 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4669 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

5.3CVSS6.5AI score0.00318EPSS

SaveExploits1

IBM Security Bulletins•added 2026/04/22 1:57 p.m.•25 views

Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)

Summary Due to use of netty-codec-http, Rational Test Automation Server and IBM DevOps Test Hub contain a CRLF injection based request smuggling vulnerability CVE-2025-67735. The netty-codec-http java library is used for asynchronous HTTP handling capabilities. Vulnerability Details...

6.5CVSS6.3AI score0.0032EPSS

SaveExploits1Affected Software1

vulnersOsv•added 2026/03/27 7:54 p.m.•5 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43243 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

7.5CVSS6.5AI score0.00701EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:48 p.m.•9 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3364 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: OSV:GHSA-PWQR-WMGM-9RR8...

7.5CVSS6.5AI score0.00701EPSS

SaveExploits1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by