Skip to content
OpenAdvisories

Package · Wolfi

apache-activemq-artemis

47 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.9

    Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Netty's HttpProxyHandler constructs HTTP CONNECT requests with header validation explicitly disabled. The newInitialMessage() method creates headers…

  • Low 2.9

    Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

    Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline ch…