io.netty netty-codec-http

• CVE-2026-42587 High 7.5 Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS 1.0%
• CVE-2026-42585 Medium 6.5 Netty: HTTP Request Smuggling due to malformed Transfer-Encoding 0.3%
• CVE-2026-42584 High 7.3 Netty: HttpClientCodec response desynchronization 0.8%
• CVE-2026-42580 Medium 6.5 Netty: HTTP Request Smuggling due to incorrect chunk size parsing 0.4%