Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-codec-smtp

1 known vulnerabilities.

1 result · Feed

  • Medium 5.5

    Netty netty-codec-smtp SMTP Command Injection Vulnerability Allowing Email Forgery

    Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.128.Final and 4.2.7.Final, the SMTP codec in Netty contains an SMTP command injection vulnerability due to insufficient input validation for Carriage Return (\r) an…