TI-2026-30861 CVE-2026-42581 · GHSA-xxqh-mfjm-7mv9
Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization
Priority HIGH 81
Netty is an asynchronous, event-driven network application framework.
RHSA-2026:25123
Red Hat OpenShift Dev Spaces 3.28.2 Release.
Released 2026-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Dev Spaces 3.28 registry.redhat.io/devspaces/dashboard-rhel9, registry.redhat.io/devspaces/openvsx-rhel9, registry.redhat.io/devspaces/pluginregistry-rhel9 +1
Fixes 7 records
TI-2026-30864 CVE-2026-42584 · GHSA-57rv-r2g8-2cj3
Netty: HttpClientCodec response desynchronization
Priority HIGH 78
Netty is an asynchronous, event-driven network application framework.
TI-2026-30859 CVE-2026-42579 · GHSA-cm33-6792-r9fm
Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)
Priority HIGH 78
Netty is an asynchronous, event-driven network application framework.
TI-2026-30867 CVE-2026-42587 · GHSA-f6hv-jmp6-3vwv
Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
TI-2026-31686 CVE-2026-43512 · GHSA-h6fc-48rj-7qqh
Apache Tomcat: Digest authenticator will authenticate any unknown user
Priority MEDIUM 52
DEPRECATED: Authentication Bypass Issues vulnerability in digest authentication in Apache Tomcat.
TI-2026-30858 CVE-2026-42578 · GHSA-45q3-82m4-75jr
Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation
Priority MEDIUM 48
Netty is an asynchronous, event-driven network application framework.
TI-2026-05545 CVE-2026-6321 · GHSA-q3j6-qgpj-74h6
fast-uri vulnerable to path traversal via percent-encoded dot segments
Priority MEDIUM 40
fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions.