TI-2026-37281 CVE-2026-50559 · GHSA-qcxp-gm7m-4j5v
Authentication/Authorization Bypass via Advanced Path Normalization Vulnerabilities
Priority HIGH 72
Quarkus is a Java framework for building cloud-native applications.
RHSA-2026:26018
Red Hat build of Quarkus 3.27.4.SP1 security update
Released 2026-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Quarkus 3.27.4.SP1 io.netty.netty-codec-haproxy-4.1.135.Final-redhat-00001.jar, io.netty.netty-codec-http-4.1.135.Final-redhat-00001.jar, io.netty.netty-codec-http2-4.1.135.Final-redhat-00001.jar +4
Fixes 14 records
TI-2026-06017 CVE-2026-6860 · GHSA-3g76-f9xq-8vp6
Improper certificate validation in Eclipse Vert.x
Priority HIGH 70
A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e.g.
TI-2026-36846 CVE-2026-50020 · GHSA-hvcg-qmg6-jm4c
Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
Priority MEDIUM 63
Netty is a network application framework for development of protocol servers and clients.
TI-2026-35500 CVE-2026-48059 · GHSA-h2qv-fj59-j46j
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
TI-2026-35195 CVE-2026-47691 · GHSA-5pvg-856g-cp85
Netty has Insufficient Bailiwick Validation for NS Records
Priority MEDIUM 43
Netty is a network application framework for development of protocol servers and clients.
TI-2026-33416 CVE-2026-45674 · GHSA-676x-f7gg-47vc
Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records
Priority MEDIUM 43
Netty is a network application framework for development of protocol servers and clients.
TI-2026-33205 CVE-2026-45416 · GHSA-x4gw-5cx5-pgmh
Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
Priority MEDIUM 41
Netty is a network application framework for development of protocol servers and clients.
TI-2026-35485 CVE-2026-48043 · GHSA-c2gf-v879-257j
netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
TI-2026-32768 CVE-2026-44893 · GHSA-cc37-9q2j-3hfv
Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
TI-2026-36836 CVE-2026-50010 · GHSA-c653-97m9-rcg9
Netty's wrapping plain trust manager silently disables hostname verification
Priority LOW 39
Netty is a network application framework for development of protocol servers and clients.
TI-2026-32226 CVE-2026-44249 · GHSA-3qp7-7mw8-wx86
Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking
Priority LOW 39
Netty is a network application framework for development of protocol servers and clients.
TI-2026-37282 CVE-2026-50560 · GHSA-563q-j3cm-6jxm
Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature
Priority LOW 37
Netty is a network application framework for development of protocol servers and clients.
TI-2026-34828 CVE-2026-47244 · GHSA-5x3r-wrvg-rp6q
Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced
Priority LOW 30
Netty is a network application framework for development of protocol servers and clients.
TI-2026-33415 CVE-2026-45673 · GHSA-xmv7-r254-6q78
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port
Priority LOW 30
Netty is a network application framework for development of protocol servers and clients.