Improper Validation of Specified Quantity in Input

Overview io.netty:netty-handler is a library that provides an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which...

at.aimit.mariella:persistence-kotlin (>=1.0.5, <=1.0.8), com.github.fmjsjx:libnetty-example (>=3.8.0-alpha1, <=3.8.0-beta3) +176 more potentially affected by CVE-2025-24970 via io.netty:netty-handler (>=4.2.0.alpha1, <=4.2.0.rc2)

io.netty:netty-handler MAVEN version =4.2.0.alpha1, =1.0.5, =3.8.0-alpha1, =3.8.0-alpha1, =3.8.0-alpha1, =3.8.0-alpha1, =3.8.0-alpha1, =3.8.0-alpha1, =3.8.0-alpha1, =3.8.0-alpha1, =0.4.1, =0.4.1, =0.4.1, =0.0.22, =0.0.17, =0.0.19 and more Source cves: CVE-2025-24970 Source advisory:...

Withdrawn Advisory: Netty-handler does not validate host names by default

Withdrawn Advisory This advisory has been withdrawn because the underlying vulnerability only concerns Red Hat's Hot Rod client, which is not in one of the GitHub Advisory Database's supported ecosystems. This link is maintained to preserve external references. Original Description Netty-handler...

as.leap:vertx-rpc (>=3.0.0, <=3.1.1), au.com.agiledigital:play-rest-support-testkit_2.11 (>=0.0.2, <=0.0.3) +2394 more potentially affected by CVE-2016-4970 via io.netty:netty-handler (>=4.0.0.alpha1, <=4.0.36.final)

io.netty:netty-handler MAVEN version =4.0.0.alpha1, =3.0.0, =0.0.2, =2.1.1, =2.2.11, =2.2.11, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.0.7, =2.4.15 and more Source cves: CVE-2016-4970 Source advisory: OSV:GHSA-RV63-GQM8-9W8Q...

Man-in-the-Middle (MitM)

netty-handler is vulnerable to man-in-the-middle attacks. The library uses an SSLEngine that does not verify certificate hostnames when establishing connections with a server by default. This allows an attacker to potentially intercept and modify network traffic in a successful man-in-the-middle...