CVE-2026-93558

Netty netty-codec-http contains a denial-of-service vulnerability in WebSocketServerExtensionHandler , caused by unbounded per-connection queue growth. An unauthenticated remote attacker can trigger this over the network with low complexity, resulting in high availability impact (CVSS 3.1 score 7...

CVE-2026-93558 Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service

Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service...

EUVD-2026-82929

Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service...

CVE-2026-93558

Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service Mitigation See https://github.com/netty/netty/security/advisories/GHSA-2g37-3h88-55hc for fixed versions and remediation guidance...