netty-http2-check

netty-http2-check Offline checker for the 7io.netty:netty-codec-http2 CVEs. Tells you which ones you are actually exposed to — and the single version that fixes all of them: 4.1.136.Final / 4.2.16.Final, a number that appears on none of the seven advisories. CVE-2025-55163 · CVE-2026-33871 ·...

netty-http-check

netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 8. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Security Bulletin:Vulnerability in netty-codec-haproxy may affect IBM Infosphere Change Data Capture (CVE-2026-93564)

Summary A security vulnerability has been identified in netty-codec-haproxy, Netty/Codec/HAProxy. netty-codec-haproxy is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

Security Bulletin:Vulnerability in netty-codec-http may affect IBM Infosphere Change Data Capture (CVE-2026-89044)

Summary A security vulnerability has been identified in netty-codec-http, Netty codec module for encoding and decoding HTTP messages and handling HTTP protocol logic. netty-codec-http is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the...

Security Bulletin:Multiple vulnerabilities in netty-codec-http may affect IBM Infosphere Change Data Capture (CVE-2026-93558, CVE-2026-93565, CVE-2026-93566, CVE-2026-93573)

Summary Multiple security vulnerabilities have been identified in netty-codec-http, Netty codec module for encoding and decoding HTTP messages and handling HTTP protocol logic. netty-codec-http is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the...

Security Bulletin:Vulnerability in netty-codec-redis may affect IBM Infosphere Change Data Capture (CVE-2026-93572)

Summary A security vulnerability has been identified in netty-codec-redis, Netty/Codec/Redis. netty-codec-redis is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

Security Bulletin:Multiple vulnerabilities in netty-codec-smtp may affect IBM Infosphere Change Data Capture (CVE-2026-93563, CVE-2026-93576)

Summary Multiple security vulnerabilities have been identified in netty-codec-smtp, Netty/Codec/SMTP. netty-codec-smtp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...

Security Bulletin:Multiple vulnerabilities in netty-codec-stomp may affect IBM Infosphere Change Data Capture (CVE-2026-93494, CVE-2026-93560)

Summary Multiple security vulnerabilities have been identified in netty-codec-stomp, Netty/Codec/Stomp. netty-codec-stomp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...

Security Bulletin:Vulnerability in netty-codec-memcache may affect IBM Infosphere Change Data Capture (CVE-2026-93561)

Summary A security vulnerability has been identified in netty-codec-memcache, . netty-codec-memcache is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...

Security Bulletin:Multiple vulnerabilities in netty-codec-http2 may affect IBM Infosphere Change Data Capture (CVE-2026-93492, CVE-2026-93567, CVE-2026-93568, CVE-2026-93569, CVE-2026-93579)

Summary Multiple security vulnerabilities have been identified in netty-codec-http2, Netty/Codec/HTTP2. netty-codec-http2 is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...

Security Bulletin: watsonx.ai on Cloud Pak for Data is vulnerable to Uncontrolled Resource Consumption due to netty-codec-http2-4.1.72.Final (CVE-2023-44487)

Summary netty-codec-http2 is used by watsonx.ai on Cloud Pak for Data for its Watson Document Understanding runtime component Vulnerability Details CVEID:CVE-2023-44487 DESCRIPTION: The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset...

Hostname Verification Bypass

io.netty, netty-codec-classes-quic is vulnerable to a hostname verification bypass. The vulnerability is due to the improper handling of the SSLEngine by the BoringSSLCertificateVerifyCallback when using a plain X509TrustManager, which allows an attacker positioned on the network path to bypass...

HTTP Authority Confusion

io.netty, netty-codec-http3 is vulnerable to HTTP authority confusion. The vulnerability is due to the codec prioritizing the Host header over the authority specified in the absolute-form request-target, which allows a remote attacker to manipulate virtual-host routing, authorization checks,...

Uncontrolled Resource Consumption

io.netty, netty-codec-http3 is vulnerable to uncontrolled resource consumption. The vulnerability is due to improper validation and lack of size limits on QPACK encoder-stream string literals, which allows a remote unauthenticated attacker to exhaust server heap memory and trigger an...

Denial-Of-Service (DoS)

io.netty, netty-codec-http3 is vulnerable to a denial-of-service DoS. The vulnerability is due to unbounded processing of continuation bytes, which allows a remote, unauthenticated attacker to exhaust heap memory and consume excessive CPU resources by sending malformed QPACK data, potentially...

HTTP Request Authority Confusion

io.netty, netty-codec-http3 is vulnerable to HTTP request authority confusion. The vulnerability is due to the failure to enforce matching authority values, which allows a remote unauthenticated attacker to bypass routing, virtual-host, and access-control restrictions by sending a crafted HTTP/3...

Integer Truncation

io.netty, netty-codec-stomp is vulnerable to an integer truncation. The vulnerability is due to improper handling of a content-length header exceeding the maximum integer value, which allows a remote attacker to send a specially crafted STOMP frame, triggering an infinite decoding loop and...