PT-2026-99337

Name of the Vulnerable Software and Affected Versions Netty HttpServerCodec versions 4.2.0.Final through 4.2.16.Final Netty HttpServerCodec versions prior to 4.1.137.Final Description Netty's HttpServerCodec pairs outbound responses with inbound requests by calling the pollMethod function once pe...

EUVD-2026-82902

A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability by pipelining HTTP/1.1 requests on a single connection and withholding reads. This action causes the methodOverflowQueue to grow without limit, leading to unbounded heap memory consumpti...