Iio.netty

Products

Exploited and recent CVEs

• CVE-2026-44248 Medium 5.3 Netty: Resource exhaustion in MqttDecoder 0.6%
• CVE-2026-42587 High 7.5 Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS 1.0%
• CVE-2026-42587 High 7.5 Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS 1.0%
• CVE-2026-42586 Medium 6.8 Netty: CRLF Injection in Netty Redis Codec Encoder 0.2%
• CVE-2026-42585 Medium 6.5 Netty: HTTP Request Smuggling due to malformed Transfer-Encoding 0.3%
• CVE-2026-42584 High 7.3 Netty: HttpClientCodec response desynchronization 0.8%
• CVE-2026-42583 High 7.5 Netty: Lz4FrameDecoder resource exhaustion 0.5%
• CVE-2026-42583 High 7.5 Netty: Lz4FrameDecoder resource exhaustion 0.5%
• CVE-2026-42582 High 7.5 Netty: HTTP/3 QPACK literal unbounded allocation 0.4%
• CVE-2026-42580 Medium 6.5 Netty: HTTP Request Smuggling due to incorrect chunk size parsing 0.4%