CVE-2026-48040

The CVE-2026-48040 entry concerns the netty-incubator-codec-ohttp project. A root cause arises in the pre-0.0.22.Final release where a fallback path for direct ByteBufs without exposed memory addresses (when sun.misc.Unsafe is unavailable) can enable an unauthenticated network attacker to trigger...