Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-codec-redis

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-56818

    Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state

    Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear t…

    netty netty netty netty Debian Ubuntu Maven
  • Medium 6.8
    CVE-2026-42586

    Netty: CRLF Injection in Netty Redis Codec Encoder

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEncoder) writes user-controlled string content directly to the network output buffer without validating or sanit…

    netty io.netty netty netty-codec-redis Debian Ubuntu Wolfi Maven