Skip to content
OpenAdvisories

Product · netty

io.netty:netty-codec-http2

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2021-21295 EPSS 19%

    Possible request smuggling in HTTP/2 due missing validation

    Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that…