GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
5 advisories
Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding
Moderate
CVE-2026-42585
was published
for
io.netty:netty-codec-http
(Maven)
May 7, 2026
Netty has HttpClientCodec response desynchronization
High
CVE-2026-42584
was published
for
io.netty:netty-codec-http
(Maven)
May 7, 2026
Netty Lz4FrameDecoder is vulnerable to resource exhaustion
High
CVE-2026-42583
was published
for
io.netty:netty-codec
(Maven)
May 7, 2026
Netty HTTP/3 QPACK literal unbounded allocation
High
CVE-2026-42582
was published
for
io.netty:netty-codec-http3
(Maven)
May 7, 2026
Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing
Moderate
CVE-2026-42580
was published
for
io.netty:netty-codec-http
(Maven)
May 7, 2026
ProTip!
Advisories are also available from the
GraphQL API