TI-2026-26231 CVE-2026-33870 · GHSA-pwqr-wmgm-9rr8
Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
RHSA-2026:8159
Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.3.GA)
Released 2026-04-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Build of Apache Camel 3.27.1.SP1 io.netty.netty-codec-http-4.1.128.Final-redhat-00001.jar, io.netty.netty-codec-http2-4.1.128.Final-redhat-00001.jar, io.vertx.vertx-core-4.5.22.redhat-00001.jar
Fixes 3 records
TI-2026-00756 CVE-2026-1002 · GHSA-cphf-4846-3xx9
Eclipse Vert.x Web static handler file access denial
Priority HIGH 70
The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically crafted request URI.
TI-2026-26232 CVE-2026-33871 · GHSA-w9fj-cfpg-grvv
Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
Priority MEDIUM 46
Netty is an asynchronous, event-driven network application framework.