4429 matches found
CVE-2026-100663
A flaw was found in Netty's HTTP/3 codec netty-codec-http3. A remote attacker can bypass security policies and tunnel allowlists when Netty acts as an HTTP/1 to HTTP/3 proxy or gateway. Due to improper translation of HTTP/1 CONNECT requests, the component uses the attacker-controlled Host header ...
CVE-2026-100662
A flaw was found in Netty's HTTP/3 codec. A remote, unauthenticated attacker can cause a Denial of Service DoS by establishing an HTTP/3 connection and sending stream instructions that declare excessively large field lengths without delivering the complete data. Because the server does not enforc...
Linux Distros Unpatched Vulnerability : CVE-2026-100656
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty io.netty:netty-codec-http contains an unbounded per-connection queue growth flaw in HttpServerCodec. The codec tracks the HTTP method of each...
Linux Distros Unpatched Vulnerability : CVE-2026-100655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty io.netty:netty-codec-http versions up to and including 4.1.137.Final and from 4.2.0.Final through 4.2.17.Final accept an unlimited number of concurrent...
Ratpack-1
Qu'est-ce que Ratpack ? Ratpack est un kit d'outils simple et performant pour créer des applications web à haute performance. Ratpack est construit sur Java et le moteur réseau événementiel Netty. L'API est optimisée pour Groovy et Java 8. L'intégration optionnelle de Google Guice offre une base...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in HttpConversionUtil.toHttp3HeadersHttpMessage, boolean, which has no special case for HTTP/1 CONNECT and instead runs the generic request conversion, drawing :authority from the Host header rather than the...
HTTP Request Smuggling
Overview Affected versions of this package are vulnerable to HTTP Request Smuggling in HttpConversionUtil.toHttp3HeadersHttpMessage, boolean, reached through Http3FrameToHttpObjectCodecfalse, which processes the Host header before the authority carried in an absolute-form request-target, so a...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the verify... method of BoringSSLCertificateVerifyCallback, which for a plain X509TrustManager invokes only the two-argument checkServerTrustedchain, authType overload, dropping the QuicheQuicSslEngine...
CVE-2026-100661
A flaw was found in Netty's HTTP/3 codec. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted stream of data to the QPACK integer decoder. Because the decoder fails to limit incoming continuation bytes, data accumulates indefinitely in memory while...
CVE-2026-100665
Netty versions from 4.2.11.Final before 4.2.18.Final contain an incomplete hostname verification fix in the QUIC certificate verification path when using a plain X509TrustManager. The BoringSSLCertificateVerifyCallback discards the SSLEngine for plain trust managers, preventing endpoint...
CVE-2026-100663
Netty's HTTP/3 codec io.netty:netty-codec-http3 from 4.2.2.Final through 4.2.17.Final does not special-case HTTP/1 CONNECT authority-form request-targets when converting HTTP/1 messages to HTTP/3 in HttpConversionUtil.toHttp3Headers. The authority-form target e.g., "CONNECT trusted.example:443" i...
CVE-2026-100666
Netty's HttpServerCodec io.netty:netty-codec-http in versions 4.2.0.Final through 4.2.16.Final and in versions up to and including 4.1.136.Final pairs each outbound response with an inbound request by calling pollMethod once per response, including for 1xx informational responses. If a client...
CVE-2026-100664
Netty's HTTP/3 codec io.netty:netty-codec-http3 versions 4.2.2.Final through 4.2.17.Final builds the HTTP/3 :authority pseudo-header from the HTTP/1 Host header before considering the authority of an absolute-form HTTP/1 request-target. In HttpConversionUtil.toHttp3HeadersHttpMessage, boolean —...
DEBIAN-CVE-2026-100657
Bulletin has no description...
DEBIAN-CVE-2026-100656
Bulletin has no description...
CVE-2026-100659
Netty's HTTP/3 codec io.netty:netty-codec-http3 in versions 4.2.0.Final through 4.2.17.Final does not enforce the RFC 9114 requirement that the :authority pseudo-header field and a literal host header field, when both present, carry the same value. A remote unauthenticated peer can send a single...
CVE-2026-100658
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2026-100657
Rejected reason: This CVE ID has been rejected as a duplicate...