Skip to content
OpenAdvisories

Package · Maven

io.netty:netty-handler-proxy

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.9
    CVE-2026-42578

    Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage() method creates headers…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven