Skip to content
OpenAdvisories

Product · netty

netty-incubator-codec-ohttp

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-54251

    netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

    netty-incubator-codec-ohttp implements Oblivious HTTP (OHTTP) gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java a…

    netty io.netty.incubator netty-incubator-codec-ohttp netty-incubator-codec-ohttp Maven
  • High 8.1
    CVE-2024-40642

    Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp

    The netty incubator codec.bhttp is a java language binary http parser. In affected versions the `BinaryHttpParser` class does not properly validate input values thus giving attackers almost complete control over the HTTP requests constructed from the parsed o…

    netty netty-incubator-codec-ohttp io.netty.incubator:netty-incubator-codec-bhttp Maven