Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/15 3:42 p.m.10 views

CVE-2025-59419 Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return \r and Line Feed \n characters in user-suppli...

6.9CVSS7.7AI score
SaveExploits0References5
Rows per page
Query Builder