GHSA-4GRM-H2QV-H6W6 Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion

Summary A memory exhaustion vulnerability in the Netty HTTP/3 codec allows the creation of an infinite number of blocked streams, which can cause OOM error. Details The vulnerability exists in io.netty.handler.codec.http3.QpackDecodershouldWaitForDynamicTableUpdates: If a client sends a header...

Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues CVE-2026-41417: missing validations leads to HTTP request smuggling and RTSP request injection via start-line injection in DefaultHttpRequest.setUri bsc1264350. CVE-2026-42578: HTTP Header Injection via HttpProxyHandler Disabled...

SUSE-SU-2026:2308-1 Security update for netty, netty-tcnative

This update for netty, netty-tcnative fixes the following issues - CVE-2026-41417: missing validations leads to HTTP request smuggling and RTSP request injection via start-line injection in DefaultHttpRequest.setUri bsc1264350. - CVE-2026-42578: HTTP Header Injection via HttpProxyHandler Disabled...

org.eclipse.jetty.documentation:jetty-documentation (>=10.0.8, <=10.0.15), org.eclipse.jetty.http3:http3-client (>=10.0.8, <=10.0.15) +6 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=10.0.8, <=10.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.10, =5.26.1, =5.27.0 Source cves: CVE-2023-36478 Source advisory: OSV:GHSA-WGH7-54F2-X98R...

org.eclipse.jetty.documentation:jetty-documentation (>=10.0.8, <=10.0.15), org.eclipse.jetty.http3:http3-client (>=10.0.8, <=10.0.15) +6 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=10.0.8, <=10.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.10, =5.26.1, =5.27.0 Source cves: CVE-2023-36478 Source advisory: GHSA-WGH7-54F2-X98R...

com.infomaximum:network (>=1.1.3p8, <=1.1.3p10), com.infomaximum:platform (>=0.1.6p17, <=0.1.13p1) +11 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=11.0.8, <=11.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =11.0.8, =1.1.3p8, =0.1.6p17, =0.2.0, =0.2.0, =0.2.0, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.10, =11.0.15 Source cves: CVE-2023-36478 Source advisory: GHSA-WGH7-54F2-X98R...

com.infomaximum:network (>=1.1.3p8, <=1.1.3p10), com.infomaximum:platform (>=0.1.6p17, <=0.1.13p1) +11 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=11.0.8, <=11.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =11.0.8, =1.1.3p8, =0.1.6p17, =0.2.0, =0.2.0, =0.2.0, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.10, =11.0.15 Source cves: CVE-2023-36478 Source advisory: OSV:GHSA-WGH7-54F2-X98R...

org.eclipse.jetty.documentation:jetty-documentation (>=10.0.8, <=10.0.15), org.eclipse.jetty.http3:http3-client (>=10.0.8, <=10.0.15) +6 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=10.0.8, <=10.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.8, =10.0.10, =5.26.1, =5.27.0 Source cves: CVE-2023-36478 Source advisory: MEND:CVE-2023-36478...

com.infomaximum:network (>=1.1.3p8, <=1.1.3p10), com.infomaximum:platform (>=0.1.6p17, <=0.1.13p1) +11 more potentially affected by CVE-2023-36478 via org.eclipse.jetty.http3:http3-qpack (>=11.0.8, <=11.0.15)

org.eclipse.jetty.http3:http3-qpack MAVEN version =11.0.8, =1.1.3p8, =0.1.6p17, =0.2.0, =0.2.0, =0.2.0, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.8, =11.0.10, =11.0.15 Source cves: CVE-2023-36478 Source advisory: MEND:CVE-2023-36478...