Lucene search
+L

434 matches found

vulnersOsv
vulnersOsv
•added 2026/05/05 6:27 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43251 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

5.3CVSS6.4AI score0.00336EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/05/05 6:27 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43251 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

5.3CVSS6.4AI score0.00336EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/05/05 6:27 p.m.•3 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4655 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-41417 Source advisory: OSV:GHSA-V8H7-RR48-VMMV...

5.3CVSS6.4AI score0.00336EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/05/05 6:27 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43251 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.132.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

5.3CVSS6.4AI score0.00336EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/05/05 6:27 p.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4655 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.12.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.13.5, =4.9.0, =4.9.0, =4.5.0, =4.5.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-41417 Source advisory: GHSA-V8H7-RR48-VMMV...

5.3CVSS6.4AI score0.00336EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/04/22 1:57 p.m.•22 views

Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)

Summary Due to use of netty-codec-http, Rational Test Automation Server and IBM DevOps Test Hub contain a CRLF injection based request smuggling vulnerability CVE-2025-67735. The netty-codec-http java library is used for asynchronous HTTP handling capabilities. Vulnerability Details...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits1Affected Software1
vulnersOsv
vulnersOsv
•added 2026/03/27 7:54 p.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3350 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: MEND:CVE-2026-33870...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/27 7:54 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/26 6:48 p.m.•7 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3350 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: OSV:GHSA-PWQR-WMGM-9RR8...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/26 6:48 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/26 6:48 p.m.•6 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.platon.gora:gora-core (1.0.0) +3350 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.9.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.7 and more Source cves: CVE-2026-33870 Source advisory: GHSA-PWQR-WMGM-9RR8...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/26 6:48 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/26 6:48 p.m.•3 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +43040 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.131.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves:...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2026/03/26 6:48 p.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.new-wave:spring-agent-app (>=0.1.0, <=0.3.0) +4010 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.11.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =0.1.0, =0.1.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.0 and more Source cves: CVE-2026-33870 Source advisory: SNYK:JAVA-IONETTY-15789756...

7.5CVSS6.4AI score0.00725EPSS
SaveExploits1
Veracode
Veracode
•added 2026/01/07 9:44 a.m.•23 views

CRLF Injection

io.netty, netty-codec-http is vulnerable to CRLF Injection. The vulnerability is due to improper sanitization of the request URI in HttpRequestEncoder, which allows an attacker to inject CRLF sequences and smuggle malicious HTTP requests...

6.5CVSS6.5AI score0.0032EPSS
SaveExploits1References3Affected Software1
vulnersOsv
vulnersOsv
•added 2025/12/16 12:19 a.m.•4 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2833 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: MEND:CVE-2025-67735...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/12/16 12:19 a.m.•6 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42052 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/12/15 11:28 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42052 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/12/15 11:28 p.m.•4 views

ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), africa.absa:inception-application (>=1.0.0, <=1.2.0) +42052 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.alpha1, <=4.1.128.final)

io.netty:netty-codec-http MAVEN version =4.0.0.alpha1, =0.0.1, =1.0.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid 0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter 0.1.0 and more Source cves: CVE-2025-67735...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2025/12/15 11:28 p.m.•3 views

ai.catboost:catboost-spark_4.1_2.13 (1.2.10), ai.telosforge:kimaira-util-webclient (1.2.6) +2833 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.alpha1, <=4.2.7.final)

io.netty:netty-codec-http MAVEN version =4.2.0.alpha1, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.10.6 and more Source cves: CVE-2025-67735 Source advisory: OSV:GHSA-84H7-RJJ3-6JX4...

6.5CVSS6.3AI score0.0032EPSS
SaveExploits1
Rows per page
Query Builder