4 matches found
CVE-2026-59898 Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 or V08 handshaker by sending Sec-WebSocket-Version: 7 and omitting Connection: Upgrade / Upgrade: websocket headers,...
com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (>=1.2.2, <=1.2.3), com.googlecode.protobuf-rpc-pro:protobuf-streamer-pro (>=1.2.2, <=1.2.3) +39 more potentially affected by CVE-2021-37136 via io.netty:netty (3.4.6.final)
io.netty:netty MAVEN version 3.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex =1.2.2, =1.2.2, =1.2.3 - net.databinder:unfiltered-netty-server2.8.1...
com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (>=1.2.2, <=1.2.3), com.googlecode.protobuf-rpc-pro:protobuf-streamer-pro (>=1.2.2, <=1.2.3) +39 more potentially affected by CVE-2019-20444 via io.netty:netty (3.4.6.final)
io.netty:netty MAVEN version 3.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex =1.2.2, =1.2.2, =1.2.3 - net.databinder:unfiltered-netty-server2.8.1...
com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (>=1.2.2, <=1.2.3), com.googlecode.protobuf-rpc-pro:protobuf-streamer-pro (>=1.2.2, <=1.2.3) +39 more potentially affected by CVE-2019-20445 via io.netty:netty (3.4.6.final)
io.netty:netty MAVEN version 3.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex =1.2.2, =1.2.2, =1.2.3 - net.databinder:unfiltered-netty-server2.8.1...