Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority HIGH 81
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-444
Priority HIGH 78
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00838 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-444
Priority HIGH 78
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01006 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-20
Priority HIGH 74
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-07-21 · Fixed in 4.2.16.Final, 4.1.136.Final CWE-295
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-07-20 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00728 · Published 2026-07-17 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-400
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0099 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-400
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00267 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-444
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00461 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-400
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00437 · Published 2026-05-13 · Partial fix · 4.2.13.Final CWE-770
Priority HIGH 72
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00701 · Published 2026-03-27 · Partial fix · 4.1.132.Final, 4.2.10.Final CWE-444
Priority HIGH 72
Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02192 · Published 2025-02-10 · Partial fix · 4.1.118.Final CWE-20
Priority HIGH 72
Netty project is an event-driven asynchronous network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01577 · Published 2022-12-12 · Partial fix · 4.1.86.Final CWE-674
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00173 · Published 2026-07-28 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-367
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00219 · Published 2026-07-28 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-299
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00473 · Published 2026-08-07 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-401
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00378 · Published 2026-05-13 · Partial fix · 4.2.13.Final, 4.1.133.Final CWE-190
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0032 · Published 2025-12-16 · Partial fix · 4.2.8.Final, 4.1.129.Final CWE-93
Priority HIGH 68
Netty project is an event-driven asynchronous network application framework.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00952 · Published 2022-12-13 · Fixed in 4.1.86.Final CWE-113
Priority MEDIUM 64
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00631 · Published 2025-09-03 · Partial fix · 4.2.5.Final, 4.1.125.Final CWE-409
Priority MEDIUM 63
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00232 · Published 2026-06-12 · Partial fix · 4.2.15.Final, 4.1.135.Final CWE-444
Priority MEDIUM 63
Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00318 · Published 2026-05-06 · Partial fix · 4.1.133.Final, 4.2.13.Final CWE-444
Priority MEDIUM 63
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0138 · Published 2024-03-25 · Partial fix · 4.1.108.Final CWE-770
Load more
THREATIST.IORead the docs