TI-2026-40972 CVE-2026-56819 · GHSA-93wv-jw9v-4972
Uncontrolled resource consumption in netty
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
RHSA-2026:76637
Apicurio Registry (container images) release and security update [ 3.3.3 GA ]
Released 2026-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Apicurio Registry 3.3.3
Fixes 8 records
TI-2026-40298 CVE-2026-55831 · GHSA-6jqx-86gh-f27w
Netty SPDY SETTINGS frame count materializes unbounded settings map
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
TI-2026-39358 CVE-2026-54512 · GHSA-j3rv-43j4-c7qm
jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation
Priority HIGH 70
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
TI-2026-40918 CVE-2026-56745 · GHSA-jppx-w49h-x2qq
Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
TI-2026-40300 CVE-2026-55833 · GHSA-mvh2-crg5-v77c
Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
TI-2026-39359 CVE-2026-54513 · GHSA-rmj7-2vxq-3g9f
jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
Priority MEDIUM 40
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.
TI-2026-42713 CVE-2026-59899 · GHSA-q4f6-jm68-57ww
Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service
Priority LOW 37
Netty is an asynchronous, event-driven network application framework.
TI-2026-40919 CVE-2026-56746 · GHSA-6cqp-g7gg-8hr5
Netty has a Security Control Bypass via CORS Short-Circuit Failure
Priority LOW 29
Netty is a network application framework for development of protocol servers and clients.