netty | Snyk

Direct Vulnerabilities

Known vulnerabilities in the netty package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M HTTP Request Smuggling	<4.1.138-150200.4.56.1
H CRLF Injection	<4.1.138-150200.4.56.1
M CVE-2026-93579	<4.1.138-150200.4.56.1
M HTTP Request Smuggling	<4.1.138-150200.4.56.1
H CVE-2026-93578	<4.1.138-150200.4.56.1
H CVE-2026-93575	<4.1.138-150200.4.56.1
H CVE-2026-93564	<4.1.138-150200.4.56.1
H Improper Input Validation	<4.1.138-150200.4.56.1
H HTTP Request Smuggling	<4.1.138-150200.4.56.1
H Allocation of Resources Without Limits or Throttling	<4.1.138-150200.4.56.1
H Improper Input Validation	<4.1.138-150200.4.56.1
M Null Byte Interaction Error (Poison Null Byte)	<4.1.138-150200.4.56.1
H CVE-2026-93563	<4.1.138-150200.4.56.1
H CVE-2026-93560	<4.1.138-150200.4.56.1
M CVE-2026-93492	<4.1.138-150200.4.56.1
M CVE-2026-93566	<4.1.138-150200.4.56.1
H CVE-2026-93565	<4.1.138-150200.4.56.1
M CVE-2026-93494	<4.1.138-150200.4.56.1
H CVE-2026-93558	<4.1.138-150200.4.56.1
H Allocation of Resources Without Limits or Throttling	<4.1.138-150200.4.56.1
H Improper Input Validation	<4.1.138-150200.4.56.1
H Allocation of Resources Without Limits or Throttling	<4.1.138-150200.4.56.1
H Improper Check for Certificate Revocation	<4.1.138-150200.4.56.1
M HTTP Request Smuggling	<4.1.138-150200.4.56.1
H Resource Exhaustion	<4.1.138-150200.4.56.1
M Information Exposure Through Caching	<4.1.138-150200.4.56.1
M CVE-2026-93562	<4.1.138-150200.4.56.1
H Algorithmic Complexity	<4.1.138-150200.4.56.1
H Improper Check for Unusual or Exceptional Conditions	<4.1.138-150200.4.56.1
H Improper Validation of Certificate with Host Mismatch	<4.1.138-150200.4.56.1
M CRLF Injection	<4.1.136-150200.4.53.1
M CRLF Injection	<4.1.136-150200.4.53.1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.1.136-150200.4.53.1
M HTTP Request Smuggling	<4.1.136-150200.4.53.1
M Allocation of Resources Without Limits or Throttling	<4.1.136-150200.4.53.1
M CRLF Injection	<4.1.136-150200.4.53.1
H Time-of-check Time-of-use (TOCTOU)	<4.1.136-150200.4.53.1
H HTTP Request Smuggling	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.136-150200.4.53.1
H Improper Certificate Validation	<4.1.136-150200.4.53.1
M Improper Access Control	<4.1.136-150200.4.53.1
H Improper Check for Certificate Revocation	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.136-150200.4.53.1
M Memory Leak	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.136-150200.4.53.1
M XML External Entity (XXE) Injection	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.136-150200.4.53.1
H Resource Exhaustion	<4.1.135-150200.4.50.1
H Memory Leak	<4.1.135-150200.4.50.1
M Resource Exhaustion	<4.1.135-150200.4.50.1
M Allocation of Resources Without Limits or Throttling	<4.1.135-150200.4.50.1
H Allocation of Resources Without Limits or Throttling	<4.1.135-150200.4.50.1
M HTTP Request Smuggling	<4.1.135-150200.4.50.1
H Memory Leak	<4.1.135-150200.4.50.1
H Insufficient Verification of Data Authenticity	<4.1.135-150200.4.50.1
H Resource Exhaustion	<4.1.135-150200.4.50.1
H Allocation of Resources Without Limits or Throttling	<4.1.135-150200.4.50.1
H Improper Check or Handling of Exceptional Conditions	<4.1.135-150200.4.50.1
H Improper Verification of Cryptographic Signature	<4.1.135-150200.4.50.1
H Insufficient Verification of Data Authenticity	<4.1.135-150200.4.50.1
H Resource Exhaustion	<4.1.135-150200.4.50.1
H Improper Access Control	<4.1.135-150200.4.50.1
M Information Exposure	<4.1.135-150200.4.50.1
M Use of Insufficiently Random Values	<4.1.135-150200.4.50.1
H Resource Exhaustion	<4.1.135-150200.4.50.1
H CRLF Injection	<4.1.133-150200.4.46.1
M Resource Exhaustion	<4.1.133-150200.4.46.1
H Resource Exhaustion	<4.1.133-150200.4.46.1
M HTTP Request Smuggling	<4.1.133-150200.4.46.1
H HTTP Request Smuggling	<4.1.133-150200.4.46.1
M HTTP Request Smuggling	<4.1.133-150200.4.46.1
H Resource Exhaustion	<4.1.133-150200.4.46.1
H Allocation of Resources Without Limits or Throttling	<4.1.133-150200.4.46.1
M CRLF Injection	<4.1.133-150200.4.46.1
H HTTP Response Splitting	<4.1.133-150200.4.46.1
H Integer Overflow or Wraparound	<4.1.133-150200.4.46.1
H Improper Input Validation	<4.1.133-150200.4.46.1
H HTTP Request Smuggling	<4.1.132-150200.4.43.1
M Allocation of Resources Without Limits or Throttling	<4.1.132-150200.4.43.1
M CRLF Injection	<4.1.130-150200.4.40.1
M CRLF Injection	<4.1.128-150200.4.37.1
M Improper Handling of Highly Compressed Data (Data Amplification)	<4.1.126-150200.4.34.1
H HTTP Request Smuggling	<4.1.126-150200.4.34.1
H Allocation of Resources Without Limits or Throttling	<4.1.126-150200.4.34.1

Vulnerability

Vulnerable Version

HTTP Request Smuggling

<4.1.138-150200.4.56.1