CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

101 matches found

vulnersOsv•added 2026/05/07 12:21 a.m.•13 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23809 more potentially affected by CVE-2026-42584 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.132.Final)

io.netty:netty-codec-http MAVEN version =4.0.0.Alpha1, =0.1.0-alpha.2, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0-alpha.3, =0.1.0-alpha.2, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.28.0 and more Source cves:...

9.1CVSS6.7AI score0.0075EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:21 a.m.•6 views

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +2921 more potentially affected by CVE-2026-42584 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.12.Final)

io.netty:netty-codec-http MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.0, =26.3.2 and more Source cves: CVE-2026-42584 Source advisory: OSV:GHSA-57RV-R2G8-2CJ3...

9.1CVSS6.7AI score0.0075EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:18 a.m.•8 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23809 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.132.Final)

9.8CVSS6.7AI score0.00607EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:18 a.m.•6 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23809 more potentially affected by CVE-2026-42581 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.132.Final)

9.8CVSS6.7AI score0.00607EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•14 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23809 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.132.Final)

6.5CVSS6.7AI score0.00364EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•16 views

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +2921 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.12.Final)

6.5CVSS6.7AI score0.00364EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•8 views

6.5CVSS6.7AI score0.00364EPSS

SaveExploits1

vulnersOsv•added 2026/05/07 12:13 a.m.•9 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23809 more potentially affected by CVE-2026-42580 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.132.Final)

6.5CVSS6.7AI score0.00364EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•8 views

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +2921 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.12.Final)

5.3CVSS6.7AI score0.00307EPSS

SaveExploits1

vulnersOsv•added 2026/05/05 6:27 p.m.•7 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23809 more potentially affected by CVE-2026-41417 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.132.Final)

5.3CVSS6.7AI score0.00307EPSS

SaveExploits1

Snyk•added 2026/05/05 6:27 p.m.•7 views

HTTP Request Smuggling

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to HTTP Request Smuggling in the setUri function. An attacker can inject arbitrary CRLF sequenc...

6.5CVSS5.9AI score0.00307EPSS

SaveExploits1References3

IBM Security Bulletins•added 2026/04/22 1:57 p.m.•5 views

Security Bulletin: Rational Test Automation Server is vulnerable to request smuggling using CRLF injection due to netty-codec-http (CVE-2025-67735)

Summary Due to use of netty-codec-http, Rational Test Automation Server and IBM DevOps Test Hub contain a CRLF injection based request smuggling vulnerability CVE-2025-67735. The netty-codec-http java library is used for asynchronous HTTP handling capabilities. Vulnerability Details...

6.5CVSS5.7AI score0.00298EPSS

SaveExploits1Affected Software1

vulnersOsv•added 2026/03/26 6:48 p.m.•15 views

ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +2093 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.11.Final)

io.netty:netty-codec-http MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =0.3.0 - ai.tock:bot-test =26.3.0 - ai.tock:bot-test-base =26.3.0 - ai.tock:bot-toolkit =26.3.0 - ai.tock:bot-toolkit-base =26.3.0 - ai.tock:tock-analytics-chatbase =26.3.0 - ai.tock:tock-aws-tools =26.3.0 -...

7.5CVSS6.5AI score0.0064EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:48 p.m.•22 views

ai.agentican:agentican-framework-core (>=0.1.0-alpha.2 <=0.1.0-alpha.4), ai.agentican:agentican-quarkus-deployment (>=0.1.0-alpha.1 <=0.1.0-alpha.4) +23656 more potentially affected by CVE-2026-33870 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.131.Final)

7.5CVSS6.5AI score0.0064EPSS

SaveExploits1

vulnersOsv•added 2026/03/26 6:48 p.m.•17 views

7.5CVSS6.5AI score0.0064EPSS

SaveExploits1

Veracode•added 2026/01/07 9:44 a.m.•9 views

CRLF Injection

io.netty, netty-codec-http is vulnerable to CRLF Injection. The vulnerability is due to improper sanitization of the request URI in HttpRequestEncoder, which allows an attacker to inject CRLF sequences and smuggle malicious HTTP requests...

6.5CVSS7AI score0.00298EPSS

SaveExploits1References3Affected Software1

vulnersOsv•added 2025/12/15 11:28 p.m.•19 views

ai.catboost:catboost-spark_4.1_2.13 (=1.2.10), ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0) +4410 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.2.0.Alpha1 <=4.2.7.Final)

io.netty:netty-codec-http MAVEN version =4.2.0.Alpha1, =0.1.0, =0.1.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =25.9.0, =26.3.2 and more Source cves: CVE-2025-67735 Source advisory: SNYK:JAVA-IONETTY-14423947...

6.5CVSS6.5AI score0.00298EPSS

SaveExploits1

Snyk•added 2025/12/15 11:28 p.m.•4 views

CRLF Injection

Overview io.netty:netty-codec-http is a network application framework for rapid development of maintainable high performance protocol servers & clients. Affected versions of this package are vulnerable to CRLF Injection in HttpRequestEncoder, due to improper sanitization of a URI with line-breaks...

6.9CVSS6.7AI score0.00298EPSS

SaveExploits1References2

vulnersOsv•added 2025/12/15 11:28 p.m.•18 views

6.5CVSS6.5AI score0.00298EPSS

SaveExploits1

vulnersOsv•added 2025/12/15 11:28 p.m.•11 views

ai.ancf.lmos-router:benchmarks (>=0.2.0 <=0.28.0), ai.ancf.lmos-router:lmos-router-hybrid (>=0.2.0 <=0.28.0) +22715 more potentially affected by CVE-2025-67735 via io.netty:netty-codec-http (>=4.0.0.Alpha1 <=4.1.128.Final)

io.netty:netty-codec-http MAVEN version =4.0.0.Alpha1, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.6.0 - ai.ancf.lmos:lmos-router-hybrid =0.1.0 - ai.ancf.lmos:lmos-router-hybrid-spring-boot-starter =0.1.0 - ai.ancf.lmos:lmos-router-llm =0.1.0 -...

6.5CVSS6.5AI score0.00298EPSS

SaveExploits1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by