Skip to content
OpenAdvisories

Package · Wolfi

apache-pulsar-4.2

82 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

82 results · Feed

  • High 7.5
    CVE-2026-33870

    Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing

    Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.132.Final and 4.2.10.Final, Netty incorrectly parses quoted strings in HTTP/1.1 chunked transfer encoding extension values, enabling request smuggling attacks. Vers…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 7.5
    CVE-2026-1605

    The Eclipse Jetty Server Artifact has a Gzip request memory leak

    In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed. This happens because the JDK Inf…

    Eclipse Foundation Eclipse Jetty druid trino Debian Ubuntu Wolfi Maven