1 matches found
CVE-2025-59419: Improper Neutralization of CRLF Sequences
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return \r and Line Feed \n characters in user-suppli...
6.9CVSS6AI score0.01553EPSS
SaveExploits0References1
20