netty netty-incubator-codec-ohttp

• CVE-2026-54251 High 8.7 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service 0.5%
• CVE-2026-48480 Medium 6.6 netty-incubator-codec-ohttp OHttpVersionChunkDraft's Missing Final-Chunk Enforcement Leads to Undetected Stream Truncation 0.2%
• CVE-2026-48040 Medium 6.8 netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access 0.2%
• CVE-2026-41207 Medium 6.9 netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures 0.2%
• CVE-2024-40642 High 8.1 Absent Input Validation in BinaryHttpParser in the netty incubator codec.bhttp 0.7%
• CVE-2024-36121 Medium 5.9 netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces 0.3%