Skip to content
OpenAdvisories

Package · Maven

io.netty.incubator:netty-incubator-codec-bhttp

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-61799

    netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash

    ## Summary `io.netty.incubator:netty-incubator-codec-bhttp` uses attacker-controlled Binary HTTP variable-length integers as `long` values but accumulates them into `int` offsets. Large valid varint lengths wrap the internal offset negative, leading to unchec…

    io.netty.incubator:netty-incubator-codec-bhttp Maven