Skip to content
OpenAdvisories

Vendor

netty

103 known vulnerabilities.

Products

netty 91 netty-incubator-codec-ohttp 6 netty-tcnative 4 netty-tcnative-boringssl-static 3 netty-incubator-codec-quic 1 io.netty:netty-codec-http2 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-59903 Public exploit

    Netty: Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

    Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a…

    netty netty netty netty Debian Ubuntu Maven