Package · Maven

io.netty:netty-codec-http

24 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.1

CVE-2019-20444

HTTP Request Smuggling in Netty

HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."

druid netty netty io.netty:netty-codec-http Debian Ubuntu Wolfi Maven

Jan 29, 2020