Skip to content
OpenAdvisories

Vendor

io.netty.incubator

1 known vulnerabilities.

Products

netty-incubator-codec-ohttp 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-54251

    netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

    netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java a…

    netty io.netty.incubator netty-incubator-codec-ohttp netty-incubator-codec-ohttp Maven