Skip to content
OpenAdvisories

Product · io.netty

netty-codec-mqtt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-44248

    Netty: Resource exhaustion in MqttDecoder

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the MQTT 5 header Properties section is parsed and buffered before any message size limit is applied. Specifically, in MqttDecoder, the decodeVariab…

    netty io.netty netty netty-codec-mqtt Debian Wolfi Maven