Vulnerabilities

TI-2026-35483 CVE-2026-48040 · GHSA-32hf-8jw3-v4qq

Out-of-bounds read in netty-incubator-codec-ohttp

LOW 37

The netty incubator codec.bhttp is a java language binary http parser.

CVSS 4.0MEDIUM 6.8 Network No auth No interaction EPSS 0.00174 Published 2026-06-04 Fixed in 0.0.22.Final CWE-125

TI-2026-29826 CVE-2026-41207 · GHSA-f659-372h-6x3x

LOW 36

The netty incubator codec.bhttp is a java language binary http parser.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00193 Published 2026-06-04 Fixed in 0.0.21.Final CWE-330

TI-2024-27053 CVE-2024-40642 · GHSA-q8f2-hxq5-cp4h

LOW 38

The netty incubator codec.bhttp is a java language binary http parser.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00677 Published 2024-07-18 Fixed in 0.0.13.Final CWE-20

TI-2024-23951 CVE-2024-36121 · GHSA-g762-h86w-8749

LOW 39

netty-incubator-codec-ohttp is the OHTTP implementation for netty.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00269 Published 2024-06-04 Fixed in 0.0.11.Final CWE-190