Skip to content
OpenAdvisories

Product · io.netty

netty-codec-redis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-42586

    Netty: CRLF Injection in Netty Redis Codec Encoder

    Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, the Netty Redis codec encoder (RedisEncoder) writes user-controlled string content directly to the network output buffer without validating or sanit…

    netty io.netty netty netty-codec-redis Debian Ubuntu Wolfi Maven