434 matches found
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43251 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43251 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4655 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-41417 Source advisory: OSV:GHSA-V8H7-RR48-VMMV...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43251 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4655 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-41417 Source advisory: GHSA-V8H7-RR48-VMMV...
Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)
Summary Due to use of netty-codec-http, Rational Test Automation Server and IBM DevOps Test Hub contain a CRLF injection based request smuggling vulnerability CVE-2025-67735. The netty-codec-http java library is used for asynchronous HTTP handling capabilities. Vulnerability Details...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3350 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: MEND:CVE-2026-33870...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3350 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: OSV:GHSA-PWQR-WMGM-9RR8...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3350 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: GHSA-PWQR-WMGM-9RR8...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4010 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.11.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.0 and more Source cves: CVE-2026-33870 Source advisory: SNYK:JAVA-IONETTY-15789756...
CRLF Injection
io.netty, netty-codec-http is vulnerable to CRLF Injection. The vulnerability is due to improper sanitization of the request URI in HttpRequestEncoder, which allows an attacker to inject CRLF sequences and smuggle malicious HTTP requests...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2833 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: MEND:CVE-2025-67735...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42052 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42052 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42052 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)
io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...
ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2833 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)
io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: OSV:GHSA-84H7-RJJ3-6JX4...