Priority LOW 36
Netty versions 4.1.133.Final through 4.1.137.Final and 4.2.13.Final through 4.2.17.Final fail to properly validate the final transfer coding in the Transfer-Encoding header, allowing attackers to smuggle requests by usin…
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00284 · Published 2026-09-10 · Partial fix · 4.1.138.Final, 4.2.18.Final CWE-444
Priority LOW 28
Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 (Socks4ClientEncoder) and SOCKS…
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00253 · Published 2026-08-22 · Partial fix · 4.2.16.Final, 4.1.137.Final CWE-626
Priority MEDIUM 41
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00316 · Published 2026-08-19 · Partial fix · 4.1.137.Final, 4.2.17.Final CWE-754
Priority MEDIUM 44
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00374 · Published 2026-08-19 · Fixed in 4.1.137.Final, 4.2.17.Final CWE-407
Priority LOW 33
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00324 · Published 2026-08-17 · Partial fix · 4.1.137.Final, 4.2.17.Final CWE-524
Priority LOW 39
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00365 · Published 2026-08-17 · Partial fix · 4.1.137.Final, 4.2.17.Final CWE-400
Priority MEDIUM 40
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-08-13 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-772
Priority MEDIUM 40
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00793 · Published 2026-08-13 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-400
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00473 · Published 2026-08-07 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-401
Priority LOW 28
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00439 · Published 2026-07-29 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-444
Priority LOW 37
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00609 · Published 2026-07-29 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-770
Priority LOW 37
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00398 · Published 2026-07-29 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-444
Priority MEDIUM 44
Netty is an asynchronous, event-driven network application framework.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0046 · Published 2026-07-29 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-835
Priority MEDIUM 58
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00165 · Published 2026-07-29 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-93
Priority MEDIUM 62
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00415 · Published 2026-07-29 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-93
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00173 · Published 2026-07-28 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-367
Priority HIGH 68
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00219 · Published 2026-07-28 · Partial fix · 4.1.136.Final, 4.2.16.Final CWE-299
Priority MEDIUM 62
Netty is an asynchronous, event-driven network application framework.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00465 · Published 2026-07-28 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-93
Priority HIGH 74
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00313 · Published 2026-07-21 · Fixed in 4.2.16.Final, 4.1.136.Final CWE-295
Priority HIGH 72
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority MEDIUM 43
Netty is a network application framework for development of protocol servers and clients.
CVSS 4.0HIGH 8.3· Network · No auth · No interaction · EPSS 0.00694 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-611
Priority MEDIUM 40
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00644 · Published 2026-07-21 · Fixed in 4.2.16.Final CWE-400
Priority LOW 29
Netty is a network application framework for development of protocol servers and clients.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00408 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-284
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Priority MEDIUM 45
Netty is a network application framework for development of protocol servers and clients.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0063 · Published 2026-07-21 · Partial fix · 4.2.16.Final, 4.1.136.Final CWE-400
Load more
THREATIST.IORead the docs