Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 38
Reset filtersNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder
Netty vulnerable to request smuggling due to incorrect parsing of chunk extensions
Netty affected by MadeYouReset HTTP/2 DDoS vulnerability
Netty's HttpPostRequestDecoder can OOM
io.netty:netty-codec-http2 vulnerable to HTTP/2 Rapid Reset Attack
Netty vulnerable to HTTP Response splitting from assigning header value iterator
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
HTTP request smuggling in netty
Possible request smuggling in HTTP/2 due missing validation of content-length
Possible request smuggling in HTTP/2 due missing validation
Local Information Disclosure Vulnerability in Netty on Unix-Like systems
HTTP Request Smuggling in Netty
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.