High DLA-1941-1 1 CVE

netty - security update

Published Sep 30, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	netty	1:3.2.6.Final-2+deb8u1

Vulnerabilities 1

High 7.5

CVE-2019-16869

HTTP Request Smuggling in Netty

Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.

druid netty netty io.netty:netty Debian Ubuntu Wolfi Maven

Sep 26, 2019