Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-42579 |
|
Vulnerability in io.netty:netty-codec-dns (CVE-2026-42579)
vulnerability in io.netty:netty-codec-dns (CVE-2026-42579). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.codec.dns.DnsCodecUtil``. Mitigation: upgrade to `4.1.133.Final` or later.
|
| CVE-2026-42578 |
|
Vulnerability in io.netty:netty-handler-proxy (CVE-2026-42578)
vulnerability in io.netty:netty-handler-proxy (CVE-2026-42578). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.proxy.HttpProxyHandler``. Mitigation: upgrade to `4.2.13.Final` or later.
|
| CVE-2026-42577 |
|
Vulnerability in io.netty:netty-transport-native-epoll (CVE-2026-42577)
vulnerability in io.netty:netty-transport-native-epoll (CVE-2026-42577). Risk of unauthorized operations or information disclosure. Exploitable via ``ALLOW_HALF_CLOSURE``. Mitigation: upgrade to `4.2.13.Final` or later.
|
| CVE-2026-44248 |
|
Vulnerability in io.netty:netty-codec-mqtt (CVE-2026-44248)
vulnerability in io.netty:netty-codec-mqtt (CVE-2026-44248). Risk of unauthorized operations or information disclosure. Exploitable via ``MqttDecoder``. Mitigation: upgrade to `4.1.133.Final` or later.
|
| CVE-2026-42586 |
|
Vulnerability in io.netty:netty-codec-redis (CVE-2026-42586)
vulnerability in io.netty:netty-codec-redis (CVE-2026-42586). Data can be tampered with by attackers. Exploitable via ``io.netty.handler.codec.redis.RedisEncoder``. Mitigation: upgrade to `4.1.133.Final` or later.
|
| CVE-2026-42582 |
|
Vulnerability in io.netty:netty-codec-http3 (CVE-2026-42582)
vulnerability in io.netty:netty-codec-http3 (CVE-2026-42582). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.2.13.Final` or later.
|
| CVE-2026-41417 |
|
Vulnerability in io.netty:netty-codec-http (CVE-2026-41417)
vulnerability in io.netty:netty-codec-http (CVE-2026-41417). Risk of unauthorized operations or information disclosure. Exploitable via `POST /s2`. Mitigation: upgrade to `4.2.13.Final` or later.
|
| CVE-2026-33870 |
|
Vulnerability in netty (CVE-2026-33870)
vulnerability in netty (CVE-2026-33870). Data can be tampered with by attackers.
|
| CVE-2026-33871 |
|
Vulnerability in dos (CVE-2026-33871)
vulnerability in dos (CVE-2026-33871). Risk of unauthorized operations or information disclosure. Exploitable via ``CONTINUATION``.
|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2015-2156 |
|
Vulnerability in netty (CVE-2015-2156)
vulnerability in netty (CVE-2015-2156). Confidential information can be exposed externally.
|
| CVE-2016-4970 |
|
Vulnerability in dos (CVE-2016-4970)
vulnerability in dos (CVE-2016-4970). Risk of unauthorized operations or information disclosure.
|