CVE-2026-55833

A flaw was found in Netty, a network application framework. A remote attacker could exploit a vulnerability in the SPDY header decoding process. By sending a specially crafted, small compressed header block, the attacker can cause it to expand significantly during decompression, leading to...

CVE-2026-44891

A flaw was found in Netty, a network application framework, specifically within the StompSubframeDecoder component. This vulnerability allows a remote attacker to cause a denial of service DoS by sending a large number of small headers. The decoder fails to properly limit the total number or...

Linux Distros Unpatched Vulnerability : CVE-2026-56820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and prior to 4.1.135.Fina...

Linux Distros Unpatched Vulnerability : CVE-2026-56817

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through...

Linux Distros Unpatched Vulnerability : CVE-2026-55833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding...

Linux Distros Unpatched Vulnerability : CVE-2026-55851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to but not including 4.2.16.Final, and...

Linux Distros Unpatched Vulnerability : CVE-2026-56819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through...

Linux Distros Unpatched Vulnerability : CVE-2026-56745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through...

GHSA-V74W-7MR3-4QG3 Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

Summary An attacker can cause Denial of Service by sending a specially crafted malicious XML payload e.g., repeated . Because the parser state is not saved between decode invocations, an attacker can trickle-feed a payload of / characters. This forces the decoder to repeatedly rescan the entire...

GHSA-MFG7-5GFP-C4W3 Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

Summary A memory leak can be caused in Netty's DNS codec by sending malicious DNS packets containing invalid domain names. Because the leak occurs incrementally per packet, sustained malicious requests will cause a gradual Denial of Service. Details Inside...

Oracle GoldenGate for Big Data Multiple Vulnerabilities 23.x < 23.26.3.0.0 (July 2026 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by multiple vulnerabilities: - Vulnerability in the Oracle GoldenGate Big Data and Application Adapters product of Oracle GoldenGate component: Third Party Eclipse...

CVE-2026-56816

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:17+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv...

CVE-2026-56821

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:12+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-g7hg-vrcf-mvmr 2026-07-29 02:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqwjehar622 2026-07-29 12:15:13+00:00| seen|...

CVE-2026-56822

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:10+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-wc96-39fc-566f 2026-07-29 02:48:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvzcxpus2j 2026-07-29 12:15:10+00:00| seen|...

CVE-2026-59919

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:08+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-wh89-7897-x99h...

CVE-2026-59920

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:05+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-3g8r-4pfx-jmfh...

CVE-2026-59921

creationtimestamp| type| source ---|---|--- 2026-07-22 22:35:03+00:00| published-proof-of-concept| https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g 2026-07-29 02:43:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrqvpsdzvg2e...

GHSA-GCJF-9MGH-3P7G Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

Security Vulnerability Report: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 1. Vulnerability Summary | Field | Value | |-------|-------| | Product | Netty | | Version | 4.2.12.Final and all prior versions with codec-http multipart | | Component |...

Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

Security Vulnerability Report: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder 1. Vulnerability Summary | Field | Value | |-------|-------| | Product | Netty | | Version | 4.2.12.Final and all prior versions with codec-http multipart | | Component |...

CRLF Injection

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to CRLF Injection in the HttpPostRequestEncoder. An attacker can inject arbitrary MIME headers...