A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompress…

▾ MidnightRed Hat · Red Hat OpenShift Dev Spaces 3.30EPSS 0.66%via CSAF

CVE-2026-55851High· 7.5

3mo ago

io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851)

A flaw was found in Netty's codec-haproxy module. A remote attacker could exploit a vulnerability in the HAProxyMessageDecoder by sending a specially crafted PROXY protocol v2 message. This leads to unbounded buffer accumulation, causing a…

▾ TwilightRed Hat · OpenShift ServerlessEPSS 0.63%via CSAF

CVE-2026-56745High· 7.5

3mo ago

netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)

A flaw was found in Netty. A remote attacker can exploit a vulnerability in the `SpdyHttpDecoder` handler of Netty's SPDY-to-HTTP codec. When processing a client-initiated `SYN_STREAM` frame, the decoder fails to release allocated memory i…

▾ TwilightRed Hat · Red Hat JBoss EAP 8.1 for RHEL 8EPSS 0.63%via CSAF

CVE-2026-56746High· 7.5

3mo ago

io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)

A flaw was found in Netty, a network application framework. A remote attacker can bypass security controls in the `CorsHandler` component by sending a specially crafted request with a null origin header. This bypasses the intended access r…

▾ TwilightRed Hat · Red Hat JBoss EAP 8.1 for RHEL 8EPSS 0.41%via CSAF

CVE-2026-56816High· 7.5

3mo ago

io.netty:netty-codec-http3: Netty: Denial of Service due to uncontrolled memory buffering in HTTP/3 (CVE-2026-56816)

A flaw was found in Netty. An unauthenticated remote attacker can exploit a vulnerability in Netty's `Http3FrameCodec` by sending specially crafted HTTP/3 reserved frames with excessive payload lengths. This can lead to uncontrolled memory…

▾ TwilightRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.64%via CSAF

CVE-2026-56817High· 7.5

3mo ago

io.netty/netty-codec-xml: Netty: Information disclosure via XML External Entity (XXE) vulnerability (CVE-2026-56817)

A flaw was found in Netty, a network application framework. A remote attacker could exploit this vulnerability by sending specially crafted XML data containing a DOCTYPE declaration to a vulnerable XmlDecoder within the Netty channel pipel…

▾ TwilightRed Hat · Red Hat JBoss Enterprise Application Platform 7EPSS 0.69%via CSAF

CVE-2026-56820High· 7.4

3mo ago

io.netty/netty-handler-ssl-ocsp: Netty: Certificate revocation bypass via OCSP response replay attack (CVE-2026-56820)

A flaw was found in Netty. The `OcspClient` component fails to validate that the Certificate ID in an Online Certificate Status Protocol (OCSP) response matches the requested Certificate ID. This vulnerability allows a remote attacker to b…

▾ TwilightRed Hat · Red Hat Data Grid 8.6.3EPSS 0.31%via CSAF

Tagged “maven”

veraPDF Validation XXE via Rich Text

veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs

veraPDF Parser DoS via PostScript CMap Streams

veraPDF Parser DoS via PostScript Type 1 Font Programs

QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding

Cedar-Java has policy injection, type confusion, and incorrect equality comparison vulnerabilities

java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages

OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway

OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check

blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser

blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)

blaze: Unbounded WebSocket message aggregation in http4s-blaze-server

OmniFaces: Forged combined-resource IDs and related output/push boundaries

Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names

Netty: Denial of Service in XmlFrameDecoder via CPU Exhaustion

c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets

Eclipse Jetty: HTTP Authority/Host mismatch

Eclipse Jetty: Path parameter traversal

Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator

Netty: TOCTOU in OcspServerCertificateValidator

Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

Netty: STOMP CONNECT Frame Header Injection in Netty

io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819)

io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851)

netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)

io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)

io.netty:netty-codec-http3: Netty: Denial of Service due to uncontrolled memory buffering in HTTP/3 (CVE-2026-56816)

io.netty/netty-codec-xml: Netty: Information disclosure via XML External Entity (XXE) vulnerability (CVE-2026-56817)

io.netty/netty-handler-ssl-ocsp: Netty: Certificate revocation bypass via OCSP response replay attack (CVE-2026-56820)